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FOREWORD 


This Indian Standard (Part 1) was adopted by the Bureau of Indian Standards, after the draft finalized by the Social 
Responsibility Sectional Committee had been approved by the Management and Systems Division Council. 


This Indian Standard is published in three parts. The other parts in this series are: 
Part2 Conducting assurance engagements for all matters other than statutory financial information — 
Guidelines 
Part3 Competence of individual applicant and firm for conducting assurance engagements — 
Requirements 


The composition of the Committee responsible for the formulation of this standard is given in Annex L. 
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INTRODUCTION 


The task of providing an assurance service has to be done wholeheartedly, sincerely and earnestly with 
consideration of appropriate due diligence, by persons who have the actual competence on the subject matter. It 
is therefore imperative that professionals who are in possession of appropriate educational qualification, technical 
understanding, knowledge, expertise and skill-set conduct such engagements. 


The emanating pressure from various peers and relevant stakeholders in conjunction with relevant business 
and regulatory requirements have been encouraging organizations in India to periodically disclose various 
non-financial based information such as, water acidification, ground water recharged, health and safety matters, 
green-house gas emitted, matters specific to sustainability/green bonds, environmental pollution burden, 
environmental or social externalities, social benefits to communities, environmental-social-governance, medical 
negligence cases, cyber security, non-financial compliances, etc. In Indian context, organizations are capturing 
information of such non-financial subject matters and reporting on the same in alignment with the requirements 
of various Global and National standards, such as Global Reporting Initiative, United Nation's Global Compact, 
UN’s Sustainable Development Goals, Department of Public Enterprise's Sustainability and CSR Guidelines, 
SEBI’s Business Reporting and Sustainability Reporting (BRSR) framework, National Guidelines on Responsible 
Business Conduct (NGRBCs), Integrated Reports as per IIRC (International Integrated Reporting Council) 
framework, CSR performance as per CSR Rules, etc. 


A lot of such advanced level non-financial, with an emphasis on science based information facilitates in 
decision making, primarily for the customers, communities, investors and regulators, apart from other relevant 
stakeholders. In order to instill confidence in the mind of such specific stakeholders, organizations these days 
are seeking a third-party opinion for such reported performance. These have in turn resulted in the surge of 
assurance/audit services of non-financial performance, which are currently being conducted by various firms 
in India on the basis of various international assurance based standards, inclusive of the standards released by 
International Organization for Standardization (ISO), such as ISO 14064 (Green house gas series), ISO 14046 
(Environmental management — Water footprint series), ISO 14016 (Environmental management — Guidelines 
on the assurance of environmental reports), etc. 


These days, in order to be able to take informed decisions, progressive customers, investors, regulators and other 
interested stakeholders lay a lot of emphasis on non-financial performance that are reported by organizations to 
understand and get a grasp of the organization’s ability to sustain as a business entity. Such interested stakeholders 
therefore put a high level of reliance and emphasis on internal and or external audit opinions, on the basis of an 
appropriate assurance standard for subject matters and information that are of specific relevance to them. 


These assurance standards will provide consistency and uniformity for conducting non-financial based assurance 
engagements by appropriate professionals/firms. 


This part of the assurance engagement standard encompasses following principles and core requirements for 
carrying out assurance engagements. 


The Three Principles 


The Principles Significance of the Principle 


Compliance and adherence with | The assurance engagement team and the quality control reviewer (QCR) shall 
essential virtues understand, apply, comply and adhere with the requirements mentioned in the 
Essential Virtues during the three stages of — a) prior to; b) while conducting; 
and c) post the completion of an assurance engagement. 


Identification and management | An assurance engagement team and QCR shall identify risks of an assurance 
of engagement risks engagement which may challenge to comply with the essential virtues. The 
significance of such risks shall be assessed and appropriate measures taken 
for mitigating and or managing the risks. 
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The Principles Significance of the Principle 


Development of a quality | A firm or reporting entity that is interested in conducting internal and or 
control system (QCS) external assurance engagement shall develop a QCS. The QCS lays quality 
control elements (QCEs). Each QCE further defines the processes and 
procedures for ensuring effective quality control measures. 


The QCS lays an emphasis on the performance of a subject matter that is 
reported. The performance of subject matter to be reported shall be on the 
basis of either a universally accepted or indigenously developed Technical 
Reference. Further, the subject matter and its performance shall be able to 
satisfy the Essential Qualities (EQs) of a particular technical reference. 


The Nine Core Requirements 


The Core Requirements Significance of the Principle 


Acceptance and or continuation or | This principle provides the basis of the following: 
discontinuation or withdrawal or 


ee a) Acceptance and or continuation of an assurance engagement, with 
rejection of an assurance engagement 


a focus on requirements that are specific to the: (1) assurance 
engagement, (2) subject matter and its information, (c) reporting 
entity. 

b) Discontinuation or withdrawal or rejecting an assurance 
engagement, if not in adherence with the requirements specified 
in the assurance standard. 


Planning an assurance engagement | This principle provides details of the following, for an assurance 
post its acceptance and or continuation | engagement: 


a) Audit plan, sampling and audit procedures, defining of roles and 
responsibilities, appropriate training while planning; and 
b) Reasons for discontinuation. 


Conducting an assurance engagement | This principle defines: 


a) Key matters that are specific to the role, responsibilities and 
behavior of an assurance engagement team, while conducting an 
assurance engagement. 


b) Five Assessment Elements (AEs), which are delineated 
by respective characteristics based on which an assurance 
engagement is conducted for the process and procedures prepared 
and information reported by a reporting entity. 


Drafting a provisional assurance This principle details the contents that shall be included in the 
conclusion provisional assurance report, which shall be on the letterhead of the 
reporting entity (in case of internal assurance) and on the letterhead of 
the firm (in case of both internal and external assurance). Further such 
a provisional assurance report shall be unsigned and undated. 


Conducting quality review of the This principle details conducting an independent quality review of 

assurance engagement the assurance engagement by a quality control reviewer (QCR), post 
completion of an assurance engagement. 

Issuance of a dated and signed This principle mentions the issuance of a dated and signed assurance 

assurance report report, on receipt of a formal approval from the QCR, post completion 


of the task of quality control review. 


Documentation of an assurance This principle details documentation of the entire assurance engagement 
engagement post completion of quality control review. 
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The Core Requirements Significance of the Principle 


Managing complaints, conflicts and | This principle deals with identifying concerns, managing and 
discrepancies and variations prior to | taking corrective actions, inclusive of legal assistance for managing 
and post release of an assurance report | discrepancies and variations that have been identified prior to and post 
issuance of an assurance opinion. 


Periodic assessment of the QCS This principle deals with periodic assessment of the QCS to identify 
gaps in its process, procedures and QCS policy, take necessary 
corrective actions; make necessary revisions; and communication of the 
changes to the assurance engagement team, QCR and other individuals, 
for appropriate action. 


iii 
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Indian Standard 


ASSURANCE ENGAGEMENT STANDARD 


PART 1 CONDUCTING ASSURANCE ENGAGEMENTS FOR ALL MATTERS 
OTHER THAN STATUTORY FINANCIAL INFORMATION — REQUIREMENTS 


1 SCOPE 


1.1 This Indian Standard (Part 1) is applicable 
for conducting the following types of assurance 
engagements, for subject matter and information that is 
other than statutory financial information: 


a) Internal assurance engagements (first and second 
party assurance engagements): 


1) by a firm and its own auditors; and 


2) by a reporting entity and its own auditors and 
or a sole practitioner, as applicable. 
b) External assurance engagements (third-party 
assurance engagements): 


1) by a firm and its own auditors and or a sole 
practitioner, as applicable. 

NOTE — Select types of information or performance reported 

for internal and or external purpose by a reporting entity is 

mentioned in Annex A. 


1.2 Some specific clauses of this standard are denoted 
by ‘NAFIAE’ (Not applicable for internal assurance 
engagements). Such clauses are not applicable from 
the perspective of conducting an internal assurance 
engagement as per this standard. 


2 TERMS AND DEFINITIONS 


For the purpose of this standard, the following terms 
and definitions shall apply. 


2.1 Auditor — Any individual who has the authority to 
conduct an assurance engagement as per this standard, 
subject to receipt of requisite registration certificate 
from the prescribed competent authority. 


Following are the various types of individuals who 
shall qualify as auditors, as per this assurance standard: 
2.2 Practitioners — This shall be of the following 
categories: 


a) Lead Internal Assurance 
(LIAP) — An individual who is: 


1) Working with a reporting entity; and 


Practitioner 


2) Authorized to act in the capacity of a lead 
internal auditor, opine and issue a signed and 
dated internal assurance report. 


b) Lead External Assurance Practitioner (LEAP) — 
An individual who is: 


1) Either a sole practitioner and or has been 
engaged by a firm; and 

2) Authorized to act in the capacity of the 
following, for disclosures by a reporting entity: 


i) Lead external auditor, who is authorized to 
issue an opined, signed and dated external 
assurance report; and 


ii) Lead internal auditor, who is authorized to 
issue an opined, signed and dated internal 
assurance report 


2.3 Senior Auditor — An individual who is: 
a) Engaged by a firm or a reporting entity; and 


b) Authorized to conduct and lead the assurance 
engagement on behalf of a lead practitioner 


2.4 Associate Auditor — An individual who is: 
a) Engaged by a firm or a reporting entity; and 


b) Authorized to conduct assurance engagement, 
under the direct supervision of the Senior Auditor 
and or otherwise the lead practitioner, as and when 
required. 


2.5 Absolute Assurance — An assurance engagement, 
whereby the assurance engagement team reduces the 
risks to zero level to provide the practitioner sufficient 
confidence that it is free from any material misstatement 
to form a positive conclusion that is highly reliable. 


2.6 Assurance Engagement — It is a process of 
gathering sufficient confidence by an assurance 
engagement team, corroborated through appropriate 
collection of evidences, to provide the practitioner 
relevant confidence to issue an appropriate assurance 
conclusion on the performance of a subject matter. 


An assurance engagement, as per this standard could be 
of the following types: 


a) ‘Reasonable’ or ‘Limited’ type of assurance 
engagements — The various characteristics that 
lead to qualification of a ‘Reasonable’ or ‘Limited’ 
type of assurance engagements are specified in 
Annex B; 
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b) ‘Attestation’ or “Direct” assurance engagement: 


1) Attestation assurance engagement — It is a type 
of assurance engagement, in which a reporting 
entity, other than the assurance engagement 
team measures or evaluates the performance of 
a subject matter on the basis of an appropriate 
technical reference; and 


2) Direct engagement — It is a type of assurance 
engagement, in which the assurance 
engagement team takes the direct responsibility 
of measurement and evaluation of the 
performance of a subject matter on the basis of 
an appropriate technical reference. 


c) Hybrid assurance engagement — It is a mix of 
the following characteristics in an assurance 
engagement: 


1) ‘Reasonable’ and or ‘Limited’ type of assurance 
engagement; and 


2) ‘Direct’ and or ‘Attested’ assurance engagement. 


2.7 Assurance Report — It is an opined form of a dated 
assurance report, containing all relevant contents that 
are to be disclosed as prescribed in Annex C which shall 
be signed off on the official letter-head of a: 


a) Firm by a lead external assurance practitioner 
(LEAP), post completion of an external and or 
internal assurance engagement conducted by a firm 
for a reporting entity; or 


b) Reporting entity by a lead internal assurance 
practitioner (LIAP), post completion of an internal 
assurance engagement. 


2.7.1 Assurance reports are either of the following types: 


a) Internal Assurance Report — An opined, signed 
and dated assurance report that is submitted on the 
basis of this standard by any of the following: 

1) A LEAP who is external to the reporting entity 
and is either a solo practitioner or a practitioner 
engaged by a firm; or 

2) A LIAP who is internal to the reporting entity 
and is employed by the reporting entity. 

b) External Assurance Report — An opined, signed 
and dated assurance report that is submitted on the 
basis of this standard by a LEAP who is external to 
the reporting entity. Such a LEAP shall be either a 
solo practitioner or a practitioner engaged by the 
firm. 


2.8 Assurance Engagement Team — It refers to a team 
comprising the following for conducting an internal and 
or an external assurance engagement: 


a) Lead practitioner, that is, either a LEAP or LIAP; 
and 


b) Senior auditor; 
c) Associate auditor; and 


d) Subject matter expert (also referred to as SME in 
this standard ), as felt necessary. 


2.9 Competent Authority — It is an appropriate legal 
entity that is recognized by the regulatory authority of 
India that is authorized to register the following for 
conducting assurance engagements: 


a) Firm that qualifies to conduct and issue a 
signed and dated assurance report for assurance 
engagements based on this standard; and 


b) Auditors that are authorized as professional 
practitioners to conduct and or issue a dated and 
signed assurance report based on this standard. 


2.10 Evidence — This is the process of collecting 
available facts and information through discussions, 
review of documentations and visual inspections 
which are valid, adequate, appropriate, sufficient and 
of optimum quality to be able to provide reasonable 
confidence to an assurance engagement team and 
primarily the practitioner to arrive at an appropriate 
assurance conclusion. 


2.11 Firm — It is a legal entity (other than a 
non-governmental organization or an organization that 
is engaged in charity) that is authorized by a competent 
authority to conduct an assurance engagement and issue 
a dated and signed assurance report as per this standard. 


2.12 First Party Assurance Engagements — It is a 
type of an internal assurance engagement, whereby, an 
internal assurance engagement team shall conduct an 
assurance engagement for the: 


a) subject matter and its information; 


b) process and procedures relevant to the subject 
matter and information that is specific to the 
reporting entity; and 

c) assessment of conformance of the set of this 
standard’s requirements, to verify whether 
the reporting entity has succeeded in meeting 
such requirements. Such type of assurance 
engagements are conducted on behalf of the 
management of the reporting entity for assessment 
of the overall effectiveness of the internal process 
and procedures of the reporting entity. 


Annex D provides an illustration of the roles and 
responsibilities of various stakeholders in a first party 
based internal assurance engagement. 


2.13 Statutory Financial Information — It is the 
financial information that is reported on a periodic basis 
by a reporting entity and is supported by a statutory 
auditor’s financial statement. 


2.14 Second Party Assurance Engagements — It is a 
type of an internal assurance engagement, whereby, an 
internal assurance engagement team shall conduct an 
assurance engagement for the: 


a) subject matter and its information, 


b) process and procedures relevant to the subject 
matter and information of an organization that is 
external to the reporting entity, and 


c) assessment of conformance to the set of this 
standard's requirements, to verify whether the 
organization that is external to the reporting entity 
has succeeded in meeting such requirements. 
Such type of assurance engagement is conducted 
on behalf of the management of the reporting 
entity for assessment of the overall effectiveness 
of the internal process and procedures of the 
organization that is external to the reporting entity, 
primarily from the perspective of conducting 
business (such as suppliers, sub-contractors, etc) 
and or for any other relevant activity, with such 
external organizations. 


Annex D provides an illustration of the roles and 
responsibilities of various stakeholders in a second 
party based internal assurance engagement. 


2.15 Third Party Assurance Engagements -- It 
is an external assurance engagement, whereby, an 
external assurance engagement team that is completely 
independent of the reporting entity shall conduct an 
assurance engagement on behalf of a firm for the: 


a) subject matter and its information, 


b) process and procedures relevant to the subject 
matter and information of the reporting entity, and 


c) assessment of conformance to the set of this 
standard's requirements to verify whether the 
reporting entity has succeeded in meeting such 
requirements. 


An external assurance engagement is conducted on 
behalf of the board members and or the management 
of a reporting entity by a firm that is independent to 
the reporting entity, for the assessment of the overall 
effectiveness of the internal process and procedures 
of the reporting entity, primarily from the perspective 
of exhibiting transparency, adding more credibility 
and or for other purpose(s), to instill a higher level of 
confidence to interested stakeholders for the reported 
subject matter and its information. 


Annex E provides an illustration of the roles and 
responsibilities of various stakeholders in a third party 
based external assurance engagement. 


2.16 In Accordance — In accordance with Part | of this 
standard refers to being completely in adherence and 
compliance with every requirement of this standard. 


2.17 Legal entity — Any organization that is registered 
with a regulatory authority in the country, whereby 
it has its operations and has the appropriate and 
valid approvals for functioning as an entity from the 
concerned regulatory authority (ies). 
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2.18 Misstatement -- It is an assessment of the 
following: 


a) Difference assessed by an assurance engagement 
team for a subject matter information based on an 
appropriate technical reference, during the course 
of an assurance engagement, in comparison with 
the information presented prior to conducting the 
assurance engagement, and 


b) Omission(s) which have been intentionally 
omitted or otherwise, out of ignorance. 


2.19 Materiality — It is the reporting entity’s process 
of determining the threshold limit of the needs or 
expectations of stakeholders, which has an effect on 
the reporting entity, in the short-term and or mid-term 
and or long-term and bears immense significance for 
concerned stakeholders. 


2.20 Professional Skepticism — It is the inquisitive 
mind of an auditor to shift into a behavior that is more 
alert to raise rational questions to assess between 
and/or inquire the authenticity of facts, evidences 
and information that is available or provided by the 
reporting entity that are relevant to the situations of an 
assurance engagement. 


2.21 Provisional Assurance Report — It is a draft 
assurance report that is likely to undergo some 
revisions before the final assurance report is issued to 
a reporting entity. Such a provisional assurance report 
shall have mention of all contents, as per Annex C of 
this standard, except the signature of the practitioner 
and date on the report. 


2.22 Quality Review — It is an independent assessment 
performed by an appropriate Quality Control Reviewer 
(QCR) of a firm or of a reporting entity (as the case may, 
be depending on whether the assurance engagement 
is internal or external) for the assurance engagement 
work executed by an assurance engagement team. 


2.23 Reporting Entity — It comprises of either or 
both the following form of legal entities that have been 
incorporated by the law of the land: 


a) A ‘Primary Entity’, which owns and takes 
responsibility for the performance of the subject 
matter that is informed and or reported; or 


b) An ‘Intermediate Entity’ that has a formal 
understanding with the ‘Primary Entity’ to 
report the performance of a subject matter that is 
informed and or reported, on behalf of the Primary 
Entity, while the Primary Entity owns the subject 
matter and its information. 


2.24 Related Subject Matter of Sustainability — 
Subject matters that are related to sustainability, such 
as, and not just limited to corporate social responsibility, 
environment, health, safety, social, governance, supply 
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chain performance, climate change, energy, ethics, 
product stewardship, labour, stakeholder inclusiveness 
and relationship, intellectual capital, human capital, 
stakeholder, cyber security, medical science, etc. 


2.25 Stakeholders — These could be either: 
a) internal individual(s); 
b) external individual(s); or 


c) external organization(s) of a reporting entity. 
Such stakeholders could 
1) be impacted by the reporting entity’s activities; 
and 


2) impact the activities of the reporting entity. 


2.26 Sole Practitioner — Any LEAP who is not 
employed by a firm; however, such a sole practitioner 
could be engaged for the purpose of conducting an 
internal and or external assurance engagement. 


2.27 Subject Matter — It is the subject content and its 
reported information that is evaluated on the basis of a 
technical reference. 


2.28 Subject Matter Expert (SME) — Any individual 
and or set of individuals of any legal entity that is 
external to either the reporting entity or the firm and has 
the requisite subject matter knowledge, competence, 
experience, skillset to assess the performance of 
a subject matter based on any relevant technical 
reference. Such a subject matter expert shall ensure 
maintenance of independence (during the course of an 
assurance engagement) with the reporting entity, for 
which an assurance engagement on the same subject 
matter and its information is being conducted by the 
firm. Such a SME shall not be authorized to issue any 
assurance report for any assurance engagement that is 
conducted as per this assurance standard. 


2.29 Subject Matter Categories (SMC) — These are 
different categories of non-financial subject matters. 
The descriptions of such SMCs are mentioned in Part 3 
of the Assurance Engagement Standard. 


2.30 Subject Matter Information — It is the result or 
performance of a subject matter that has been evaluated 
on the basis of an appropriate technical reference, witha 
purpose of informing and or reporting to the concerned 
stakeholders. 


2.31 Technical Reference — It is the basis that is 
applied for deriving the performance of a subject 
matter. Such references could be either: 


a) globally available and ‘acceptable’; or 


b) ‘developed’ by the reporting entity, which should 
bear sound reasoning and scientific basis to find a 
global acceptance. 


2.32 Value Creation — It is a reporting entity’s 
objective to create enhanced value for its stakeholders 


and for itself by putting in effective strategies and 
considering science, ethics, laws, regulations and 
context-based metrics in the measures to be taken 
through the application of various resources, which 
when implemented may have both positive and or 
unintended and or non-envisaged negative effects on 
the reporting entity and or on the environment and or 
on the stakeholders and or on the society at the local, 
and or regional and or global levels over the short or 
mid or long term. 


3 PRINCIPLES AND THEIR REQUIREMENTS 


3.1 Compliance and Adherence with Essential 
Virtues 


An assurance engagement team and the Quality Control 
Reviewer (hereinafter as “QCR') shall understand, 
apply, comply and adhere with the qualities mentioned 
in each of the following Essential Virtues and their 
corresponding requirements during various stages, such 
as, prior to; while conducting; and post completion of 
an assurance engagement. 


3.1.1 Essential Virtue 1: Maintaining Integrity 


a) Be sincere, truthful, competent, candid and remain 
fair and unbiased in all professional dealings and 
accordingly conduct an assurance engagement 
with full honesty, diligence and responsibility, 
without being influenced by any reason that is 
construed unethical. 


b) Remain in compliance with applicable legal 
requirements and shall not bring any dishonor or 
discredit to the profession. 


c) Knowingly, not be associated with an assurance 
engagement that: 


1) may mention or has mentioned contents in the 
assurance report that are misleading; or 


2) may omit or conceal or has omitted or 
concealed material contents. 


d) Sincerely consider and resolve the conflicting 
views and or opinions of other assurance 
engagement team members, in consultation with 
the practitioner and or the QCR and or other expert 
individuals, truthfully, completely, accurately, 
transparently and within a specified time-frame. 


3.1.2 Essential Virtue 2: Maintaining due Professional 
Care and Competence 


a) Not conduct nor shall review an assurance 
engagement (as applicable in their respective 
role) as per this standard, if not in possession of 
the requisite professional qualification, from the 
competent authority; 


b) Knowingly not be associated with an assurance 
engagement that cannot be completed within the 
agreed timeframe or cannot diligently adhere to 
the requirements of this standard; 


c) Have the requisite educational and professional 
qualification, skillset and competence that 
is appropriate to the subject matter of the 
assurance engagement to be able to deliver 
competent professional service and provide 
reasoned judgment that is appropriate to the audit 
circumstance; and desist from making wrongful 
statements of qualification, competence and 
skillset for conducting an assurance engagement; 


d) Continually equip oneself with prevailing good 
practices and appropriate techniques; and receive 
appropriate training, supervision and guidance for 
conducting assurance engagements; 


e) Conducta verifiable and rational form of assurance 
engagement, supported by appropriate sample size 
and relevant evidences, followed by maintenance 
of the appropriate documented information for an 
agreed and reasonable period; and 


f) Evaluate results which had been assessed 
by previous practitioners, depending on the 
circumstances of the assurance engagement, if felt 
necessary. 


3.1.3 Essential Virtue 3: Maintaining Confidentiality 


a) At every moment remain self-aware, highly 
alert and be careful of accidental disclosure of 
any unintended information; understand and 
acknowledge that relevant information gathered 
in any form, during an assurance engagement is 
critical and sensitive to the reporting entity and 
or any other relevant stakeholder/organization 
and hence, shall maintain confidentiality of the 
information during and post the closure of any 
assurance engagement. 


b) Not use the information gathered for any personal 
advantage nor shall disclose to any other party who 
is not intended for the receipt of such confidential 
information. 


c) Consider the significance of the effect of disclosure 
of such confidential information, in consultation 
with the QCR and the appropriate representatives 
of the reporting entity, as and when required; 
and accordingly obtain the necessary consents 
from the concerned authorities of the firm and or 
reporting entity, prior to such a disclosure. 


d) Disclose such confidential information to serve 
the purpose of any compliance or professional 
related requirement and legal proceedings, as felt 
appropriate and necessary. 


3.1.4 Essential Virtue 4: Maintaining Independence 
During the Period of Conducting an Assurance 
Engagement 


a) Maintain independence (during the period of 
conducting an assurance engagement), remain 
unbiased, and ensure no conflict of interest in 
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any form to be able to keep the mind free from 
any external persuasion, prior to conducting 
an assurance engagement. For the purpose of 
conducting internal assurance engagement, a team 
member shall be independent of the function being 
audited. 


b) Not allow any form of unfair preference and or 
undue influence of others on oneself that is deemed 
inappropriate and unethical, which may otherwise 
supersede one’s professionalism thereby resulting 
in the delivery of an inappropriate judgment. 


3.2 Identification and Management of Engagement 
Risks 

An assurance engagement team and or the QCR and 
or the firm may be subjected to working environments, 
business opportunities and relationships that may 
emanate risks, which may lead to conflicts and pose 
challenge to be in compliance and adherence with the 
requirements mentioned against the aforesaid essential 
virtues. Such risks shall, therefore, be identified, their 
significance assessed and appropriate measures taken 
for mitigating and or for neutralizing the risks to an 
extent that shall not put an assurance engagement in 
jeopardy. 


3.2.1 Identification of Engagement Risks 


An identified risk could be of any of the following 
types: 


a) Self-assessment Risk — It is a type of risk, 
whereby, an assurance engagement team member 
and or the QCR performs an assurance engagement 
for the same subject matter, for which the advisory 
services were performed by self or by any other 
member of the assurance engagement team. 


b) Over Confidence Risk — It is a type of risk, 
whereby, an assurance engagement team member 
and or the QCR shall rely on the work performed 
by the previous assurance engagement team 
member(s), without conducting an appropriate 
evaluation of the findings. 


c) Personal Interest Risk — It is a type of risk 
whereby, an assurance engagement team member 
and or the QCR has some form of personal 
interest, which may have an altered influence on 
the behaviour of the team member, leading to an 
inapt judgment. 

d) Advocacy Risk — It is a type of risk, whereby 
an assurance engagement team member and or the 
QCR shall promote and or advocate a reporting 
entity or its employer to such an extent that the 
independence of the assurance engagement team 
member gets compromised (NAFIAE). 


e) Long-association Risk — It is a type of risk 


whereby, an assurance engagement team 
member’s and or the QCR's long standing and or 


IS 26002 (Part 1) : 2022 


closeness with representative of a reporting entity 
shall lead to being emphatic and compassionate 
to the interests of the reporting entity and shall 
therefore, accept their tasks without conducting 
requisite due diligence or evaluation to the extent 
that is required. 


f) Unsettling Risk -- It is a type of risk whereby, 
an assurance engagement team member and 
or the QCR is threatened to such an extent by a 
stakeholder that it unsettles the mind and behavior 
of the assurance engagement team member and or 
the QCR and scares and or discourages them from 
maintaining objectivity and act fairly. 


3.2.2 Management of the Engagement Risks 


The assurance engagement team shall assess and 
evaluate the effect of the aforementioned risks, 
delineate the measures to eliminate and or reduce and 
or control the risks, and manage the identified risks to 
the extent that is deemed necessary and acceptable, or 
otherwise consider the option of either not conducting 
or resigning from the assurance engagement. However, 
despite putting appropriate safeguards, if an assurance 
team member and or the QCR and or the firm deviate 
from the requirements of this standard intentionally 
and or unintentionally, then appropriate actions, in 
consultation with the QCR shall be initiated promptly, 
inclusive of taking measures to control the damage. 
If felt necessary, the assurance engagement team and 
or the QCR and or the firm shall seek legal assistance 
and or report the matter to the reporting entity and or 
to appropriate professional body and or to any other 
regulatory authority, as felt appropriate and necessary. 


3.3 Development of a Quality Control System 


A firm or reporting entity that is interested in conducting 
external and or internal assurance engagement, 
as applicable, as per this standard, shall establish, 
implement and maintain an effective Quality Control 
System (‘OCS’) that delineates the processes and 
relevant procedures, as per the requirements defined in 
each of the following quality control elements. 


3.3.1 Development and Commitment to QCS Policy by 
the Leadership 


a) The leadership of the following shall develop an 
appropriate QCS policy: 
1) A firm that intends to conduct external and or 
internal assurance engagements; 


2) A reporting entity that intends to conduct 
internal assurance engagements; and the 
QCS policy shall be pertinent to assurance 
engagements that shall be conducted as per 
this standard. Such a QCS policy shall be 
dated and signed. 


b) The leadership shall ensure creation of a 
professional environment, whereby, the assurance 


engagement team members, the QCR and the firm 
or reporting entity understand in principle the 
essence of an effective QCS and its policy at every 
stage of an assurance engagement and accordingly 
practice and implement the same. 


c) For effectively conducting an assurance 
engagement, the QCS policy shall lay its 
commitment for continuous compliance with the 
following: 

1) Ensuring independence (during the period of 
conducting an assurance engagement), 


2) Availing appropriate qualified human capital, 


3) Firm to have 
(NAFIAE), 


4) Acceptance and or continuation and or 
rejection and or withdrawal and or resignation 
from an assurance engagement, 


the necessary approvals 


5) Maintaining appropriate quality control of an 
assurance engagement, 


6) Appropriate documentation of an assurance 
engagement; 

7) Registration and management of complaints, 
conflicts, discrepancies and variations prior to 
and post release of assurance report; and 


8) Appropriate monitoring, evaluation, continual 
improvement, taking corrective actions and 
communication of corrective measures taken. 


Further, appropriate processes and procedures shall 
be developed in context to the aforementioned, in the 
QCS to be developed. 


d) The QCS policy shall be appropriately 
documented; effectively communicated to 
concerned employees for its implementation; 
made available to interested stakeholders, if sought 
by them; monitored and evaluated for further 
corrections or revisions, if any and accordingly 
updated. 


e) For the purpose of conducting assurance 
engagements, the QCS policy shall mention the 
capping of total number of assurance engagements 
that can be conducted by a practitioner as per this 
standard. 


1) For assurance engagements followed by 
certification of matters specific to the Basic 
Level Certification and or Advanced Level 
Certification of the IS 26001 (NAFIAE): No 
practitioner shall sign and issue more than 
sixty number of assurance reports on the basis 
of this assurance standard, for the purpose of 
certification of organizations to the IS 26001 
in any financial year. This includes the signing 
and issuance of assurance reports that are to 
be submitted post completion of surveillance 
audits to be conducted for each of the certified 
organization, on an annual basis. 


2) For assurance engagements other than 
certification of matters specific to the IS 26001 
(NAFIAE): No practitioner shall sign and issue 
more than the following assurance reports, as 
per this standard in any financial year: 


i) Fifty numbers of organizations (other than 
non-governmental organizations) that 
are registered as legal entities with any 
regulatory authority, and 


ii) Fifty numbers of non-governmental 
organizations that are registered as legal 
entities with any regulatory authority. 


The QCS policy may however reduce the 
aforementioned limit based on the applicable legal 
requirements and keeping in consideration the work 
load of the practitioner, on account of all assurance 
engagements combined together, which shall not 
lead to any form of compromise in the quality of the 
assurance engagements delivered. 


f) For all such assurance engagements relevant to 
non-financial performance conducted on the basis 
of this standard, the QCS Policy shall define the 
assignment of responsibility to one such senior 
and experienced practitioner, who shall lead the 
other assurance practitioners, if present, within the 
firm. 


3.3.2 Development of Process and Procedures for 
Ensuring no Conflict and Independence During the 
Period of Conducting an Assurance Engagement 


3.3.2.1 Development of appropriate 
independence-based process and procedures: 


a) Requirements specific to a firm for conducting 
internal and/or external assurance for a reporting 
entity: 

1) The firm shall establish and maintain 
appropriate process and procedures to ensure 
that none of the members of its assurance 
engagement team and QCR is engaged in 
any of the following prohibited services that 
creates a conflict with its independence, for 
which an assurance engagement service is 
sought, during the period of conducting the 
assurance engagement: 


i) Development and or implementation of 
process and procedures, for which the 
assurance engagement is to be performed; 
and 


ii) Performing any form of management 
function or out-sourced service or advisory 
service. 


2) The QCS shall establish and maintain 
appropriate process and procedures to ensure 
that each of the assurance engagement team 
members and QCR: 
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i) If already conducting an assurance 
engagement, shall not seek any form of 
employment on full time or part time or 
contractual basis with the reporting entity 
(or any other legal entity, whereby it 
could lead to a conflict of interest) until 
the completion of any of the following 
(whichever is higher): 


- One year from the official date of closure 
of the assurance engagement, or 


- One year from the official date of receipt 
of acceptance of resignation from the firm. 


ii) If had already been in any form of 
employment on full time or part time or 
contractual basis with the reporting entity, 
for which an assurance engagement is 
being conducted, such a resource shall not 
play any role in the assurance engagement, 
until the completion of at least a year of 
employment (either on full-time or part 
time or contractual basis) with the firm, 


iii) Submits an appropriately signed written 
undertaking in a specific format prepared 
by the firm, as a testimony of their formal 
compliance with the above requirements, 
prior to conducting an assurance 
engagement. Such undertakings shall be 
communicated officially to the reporting 
entity, prior to the start of an assurance 
engagement to facilitate in identification 
of discrepancies and conflicts, if any, and 
accordingly take appropriate corrective 
actions for the same. 


3) The QCS shall establish and maintain 


appropriate process and procedures related to 
the following for the effective communication 
to the reporting entity: 


i) Reporting entity shall implement 
appropriate measures for maintaining 
independence, by not hiring any of the 
assurance engagement team members and 
or QCR, either on full-time or part time 
or contractual basis during any of the 
following period (whichever is higher): 


— The period of conducting assurance 
engagement; or 

— The period agreed by any of the assurance 
engagement team and the QCR with the 
firm. 


ii) That in the event of any breach of 
independence by the reporting entity, the 
firm has the right to take up the following 
actions, as deemed necessary: 


- Not to issue the assurance report or declare 
the signed and issued assurance report null 
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b) 


and void, citing adequate reasons to the 
reporting entity and or to any concerned 
stakeholder, and 


- Take appropriate legal action and or 
report the matter to concerned regulatory, 
implementing and any other applicable 
authorities. 


Requirements specific for a reporting entity: 


1) For the purpose of conducting internal 
assurance engagement, a reporting entity shall 
establish appropriate process and procedures 
to ensure that the members of its assurance 
engagement team and QCR to the extent 
practicable are independent of the function 
being audited. 


3.3.2.2 Development and maintenance of appropriate 
independence declaration forms for conducting external 
assurance engagements: 


a) 


The firm in alignment with its QCS policy shall 
develop appropriate process and procedures 
in conjunction with the following formats, for 
seeking written undertaking from the assurance 
engagement team and the QCR with respect to 
their maintenance of independence in assurance 
engagements (during the period of conducting an 
assurance engagement). Such a confirmation shall 
be retained by the firm in an electronic form for a 
specific period, as deemed appropriate: 


1) Annex F for Assurance Engagement team 
members and QCR other than SME/Sole 
Practitioner; and 


2) Annex G for a SME/sole practitioner. 


Such a written confirmation in the aforementioned 
Annex F shall be obtained by the firm, for all the 
assurance engagements that have been conducted by 
the assurance engagement team, latest by the following: 


b) 


c) 


— First fortnight of April of every calendar year; 
or 


- For any employee who has resigned, the 
Annex F shall be signed within the tenure of 
employment of the assurance engagement 
team member with the firm. 


The filled in signed Annex G shall be sent to the 
reporting entity by the QCR for their information, 
followed by seeking an official confirmation 
from the reporting entity, of the SME's/sole 
Practitioner's independence/no conflict in the 
assurance engagement to be conducted. In case of 
conflict, if any, if informed by the reporting entity, 
then the SME and or the Sole Practitioner as the 
case may be, shall not be engaged for conducting 
the assurance engagement by the firm. 


Such a written confirmation for a SME/Sole 
Practitioner shall however be obtained by 


d) 


the firm, during the course of engaging the 
SME/Sole Practitioner formally during the formal 
contractual stage of agreement with the firm, prior 
to the conduct of the assurance engagement. 


Such a written confirmation of a SME/Sole 
Practitioner in Annex G as well as the official 
confirmation received from the reporting entity 
shall be an integral part of the formal contractual 
agreement to be signed with the reporting entity 
by the firm. Post receipt of filled in independence 
declaration forms from the assurance engagement 
team and QCR, the firm shall submit the filled in 
format to the competent authority in Annex H, 
duly signed and stamped by the authorized QCR 
on an annual basis by the end of the month of 
April of every calendar year, indicating the firm's, 
the assurance engagement team’s, the QCR(s)’s 
and or SME(s)’s and or Sole Practitioner’s 
independence in the assurance engagements 
conducted by the firm in the previous financial 
year (FY). 


3.3.3 Development of Process and Procedures for 
Ensuring Availability of Appropriate Qualified Human 
Capital 


a) 


b) 


For the purpose of conducting an assurance 
engagement effectively, the QCS shall establish 
and maintain appropriate process and procedures 
for ensuring availability of appropriate resources, 
who shall be in possession of appropriate 
competence (educational and professional 
qualification from the competent authority 
and has the requisite competence and skill that 
are more appropriate to the situations of the 
assurance engagement). 


Each of the assurance engagement team members 
and QCR shall: 


Be engaged by a legally bound agreement; 


Understand and comply with every requirement 
of this standard; 


Shall have the competence (appropriate 
professional qualification from the competent 
authority, skill, experience, etc) to conduct 
assurance engagements and or for issuance 
assurance reports, as applicable, within a time 
bound manner: 

NOTE — A SME may however not be required to be in 
possession of the qualifications of an auditor that is specified in 
Part 3 of this Standard. 

Have a good understanding of the objective 
and scope of the assurance engagement and 
other relevant details, as deemed necessary to 
enable them to assess the conflicts, reasons for 
maintaining independence and consequences of 
breaching independence (during the period of 
conducting an assurance engagement); 


d) Have identified and assessed the risks, and have 
accordingly put up appropriate measures to 
mitigate the risks and bring them to an acceptable 
level: 


e) Update through appropriate training, as and when 
required pertaining to this standard or on the basis 
of other tools and technologies, as applicable, for 
conducting the assurance engagement: 


f) Be able to decline or withdraw or resign from an 
assurance engagement, on justifiable grounds, at 
any point of time, while conducting an assurance 
engagement; 

g) For an assurance engagement of multiple subject 
matters, the QCS shall establish and maintain 
appropriate processes and procedures for forming 
an appropriate assurance engagement team, 
comprising multiple practitioners of varying 
expertise, who shall be supported by other 
relevant qualified auditors and SMEs, wherever 
felt necessary and QCR(s), who collectively shall 
have the competence to conduct the assurance 
engagement in their respective roles; 


h) The QCS shall also establish and maintain 

appropriate processes and procedures to ensure 
that a legally enforceable agreement is signed with 
the subject matter expert, with such appropriate 
terms and conditions, as felt necessary; 
NOTE — It is crucial to note that engagement of a subject 
matter expert shall not be construed that it shall nullify the 
accountability and responsibility of the practitioner to any 
extent, for the conduct and issuance of a signed and dated 
assurance report. It is therefore necessary for the practitioner 
to have the basic educational qualification, knowledge and 
expertise to be able to technically understand, review, judge 
and have confidence of the work delivered by the subject 
matter expert for the assurance engagement. 

j) For conducting an independent quality review of 
an assurance engagement, prior to issuance of a 
dated and signed assurance report, an appropriate, 
competent, experienced and qualified QCR 
shall be made available, who shall maintain 
objectivity and independence (during the period 
of conducting an assurance engagement). In the 
absence of an appropriate QCR within the firm, 
for conducting the review of the relevant subject 
matter, a suitable QCR from an external source 
shall be engaged to conduct an independent quality 
review for an assurance engagement and or for 
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any other purpose required as per this standard. 
There shall also be provision for replacement of 
the existing QCR with another appropriate QCR, 
for whatsoever reason, it may be necessary. 


3.3.4 Development of Process and Procedures for 
Ensuring a Firm has Valid Approvals to Conduct an 
Assurance Engagement 


For the purpose of conducting an assurance engagement 
effectively, the QCS shall establish and maintain 
appropriate processes and procedures for ensuring 
that the firm is in receipt of valid approvals from the 
competent authority, to be able to conduct an assurance 
engagement and issue a dated and signed assurance 
report. 


3.3.5 Development of Appropriate Processes and 
Procedures for Acceptance and or Continuation and or 
Rejection and or Withdrawal and or Resignation from 
an assurance engagement 


3.3.5.1 Broad conditions of acceptance and or 
continuation of an assurance engagement: 


The QCS shall establish and maintain appropriate 
processes and procedures to ensure the following: 


a) The assurance engagement team members shall 
uphold their essential virtues and maintain 
objectivity; have appropriate competence, 
understanding, expertise and qualifications to 
complete the assurance engagement within the 
time frame agreed with the reporting entity; and 
provide sufficient confidence to the practitioner 
that they shall individually and collectively be able 
to enable the practitioner to draw an appropriate 
assurance conclusion; 


b) The reporting entity is not involved in misconduct 
or shall not be unfair and not transparent in its 
dealings with the assurance engagement team; 


c) The assurance engagement 
requirements of this standard; and 


satisfies all 


d) The performance of subject matter to be reported 
shall be on the basis of either a globally accepted 
or indigenously developed technical reference. 
Further, the subject matter and its performance 
that is derived from a particular technical reference 
shall be in possession as given in Table | criteria 
that is prescribed against the respective Essential 


Quality (EQ). 
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Table 1: Key Criteria of the Essential Quality 
( Clause 3.3.5.1) 


Description of the Key Criteria of the Essential Quality 


The subject matter and its information can be traced back to the sources, and subjected to an independent 
assurance, with no hesitation, as it has the provision of all such information that shall be required by the auditor 


The subject matter and its information provide a balanced representation of the organization's performance 
and issues within the defined reporting scope and is free from any bias or preference in the given situation, and 
depicts both the positive and negative performances, where applicable, to present alternative perspectives of 


The subject matter and its information is expressed in simple language, and has clarity, brevity and can be easily 
understood, and consistently interpreted by any concerned stakeholder, clearly represented in a manner that 


The subject matter and its information shall be able to evaluate the degree of change of its performance, 
over a period of time within its own operations within the organization, and/or when compared with other 


The subject matter and its performance shall be complete with the declared scope of reporting and the reporting 
period, complete in every form and include all relevant matters to prevent any misleading information and not 
omit matters that are material and relevant. It should ensure inclusion of all factors that have been considered 


The subject matter and its performance shall be consistent with previously reported information, if any, and 


The subject matter and its information shall be relevant to the issues and needs of the concerned stakeholders 


The subject matter and its information shall over time, hold the same level of reliability, if measured or evaluated 
by other practitioners in similar circumstances; be reasonably accurate enough to allow decision makers and 
concerned stakeholders to develop informed judgments; and for qualitative statements be accurate/valid on the 


The subject matter and its information shall be appropriate for the reporting time period, so that the concerned 


The processes, procedures and assumptions used in the collection, analysis and reporting of the subject matter 


Essential Quality (EQ) 
Auditability 

for the audit of the reported contents. 
Balanced 

controversial issues. 
Clarity 

ensures significant trends; and any unexpected results are properly explained. 
Comparability 

organizations of similar attributes. 
Completeness 

in the evaluation and reporting of the performance. 
Consistency 

technical reference. 
Relevance 

of the reporting entity. 
Reliability 

basis of other reported information and or available evidence. 
Timeline 

stakeholders find a value from timely disclosure of such information. 
Transparency 

and its information shall be appropriately explained. 


3.3.5.2 Broad agreement on terms and conditions 
of the tenure and fee for conducting external assurance 
engagement (NAFIAE): 


The QCS shall establish and maintain appropriate 
processes and procedures to ensure the following: 


a) The assurance engagement, for a reporting entity on 
a specific subject matter can be conducted by a firm 
for a maximum period of 10 years, subject to the 
condition that no practitioner of the firm is authorized 
to conduct assurance engagement beyond five years; 
and or as per prescribed legal requirements, if any. 

b) The firm and the practitioner shall cease to perform 
an assurance engagement for a minimum period 
of two years, on the same subject matter after 
the completion of the aforementioned period of 
conducting the assurance engagement. 
c) Makes suitable and appropriate arrangement of fee 
for the duration of assurance engagement that is 
agreed with the reporting entity in order to ensure 
that the minds of the assurance engagement team 
members are free of any conflict, such as financial 
based self-interest. 

d) Agrees on the clauses or conditions of exit, prior 

to signing of the assurance engagement with the 

reporting entity. 
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3.3.5.3 Broad conditions of rejection or withdrawing or 
resigning from an assurance engagement. 


If in the opinion of an assurance engagement team, the 
identified risks cannot be mitigated and or neutralized 
and or shall pose challenges to being in compliance with 
the requirements specified in this assurance standard, 
the assurance engagement team shall communicate 
to the reporting entity the reasons for non-acceptance 
or withdrawal from or rejection of the assurance 
engagement. 


3.3.6 Development of Process and Procedures for 
Maintaining Appropriate Quality Control in an 
Assurance Engagement 


The QCS shall lay down appropriate process and 
procedures for the documentation of the organizational 
structure; roles and responsibilities of persons in 
governance, management and quality control of 
assurance engagements conducted as per this standard 
or for any individual who is responsible for effective 
implementation of QCS developed as per this standard. 
Further the QCS shall also ensure the following: 


3.3.6.1 Quality in assurance engagement is not 
compromised and is maintained: 


The QCS shall establish and maintain appropriate 
processes and procedures to ensure the following: 


a) Objective, consistency and quality of service is 
maintained; and the quality of service is improved 
continually where practicable, and 


b) No practitioner is overworked, which otherwise 
may result in a compromise in the quality and 
objective of the assurance engagement. 


3.3.6.2 Appropriate supervision and assessment of 
engagement 5 performance 


The QCS shall establish and maintain appropriate 
processes and procedures for the following: 


a) Adequate and appropriate competent, experienced 
and qualified auditors are available for conducting 
and supervising an assurance engagement, and 
QCRs are available for reviewing an assurance 
engagement, and 

b) Appropriate consultations are conducted on 
disputable and conflicting matters in presence 
of competent resources for resolving difference 
of views or opinions, further, appropriate 
recommendations and decisions that are arrived 
at, on the basis of such mutual consultations shall 
be documented and implemented appropriately. 


3.3.7 Development of Appropriate Process and 
Procedures for Appropriate Documentation of an 
Assurance Engagement 


The QCS shall lay down appropriate process and 
procedures for the following: 


a) Compilation, maintenance and retention of the 
information gathered or generated in the course of 
an assurance engagement, for a defined period: 

b) Documentation of the names of the assurance 
engagement team members, SMEs, QCR and 
their up-to-date professional records inclusive of 
their relevant qualifications, training, experience, 
affiliations, professional status, technical 
expertise, competence, their contact co-ordinates, 
permanent address and correspondence address 
and their specific roles and responsibilities in the 
assurance engagement, 


Documentations of consultations that took place 
on disputable or conflicting matters amongst the 
assurance engagement team and other qualified 
individuals and the decisions emerging from such 
discussions; 

d) Documentation of the old and new revisions made 
on the basis of the review of the QCS; and 


Documents are protected, treated with full 
confidentiality; their integrity is maintained and 
is in safe custody; and are easily accessible and 
retrievable. 


e) 
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3.3.8 Development of appropriate Process and 
Procedures for Registration and Management of 
Complaints, Conflicts, Discrepancies and Variations 
Prior to and Post Release of Assurance Report 


a) The QCS shall establish and maintain appropriate 
processes and procedures for the receipt and 
documentation of conflicting views, complaints 
and or allegations from any concerned stakeholder, 
inclusive of any member of the assurance 
engagement team; 


1) On the deviation from the requirements of 
this standard by any member of the assurance 
engagement team and or QCR and or the SME 
and or firm, for the assurance engagement 
conducted; 

2) On conflicting or difference of views amongst 

assurance engagement team members, on 

certain matters of the assurance engagement; 
and 

3) On discrepancies, variations or misstatements 

in the assurance report already issued. 

b) The QCS shall establish and maintain appropriate 

processes and procedures for appropriate 

consultation amongst the assurance engagement 


team, the QCR and concerned authorities: 


1) For assessment of the risks emanating from 
such conflicting or difference of views, 
deviations or misstatements; 


2) Intimating the same to the reporting entity and 
concerned authorities and stakeholders, as felt 
appropriate; and 

3) Seeking appropriate necessary legal assistance, 
wherever felt appropriate. 

c) The QCS shall establish and maintain appropriate 
processes and procedures for the measures to 
be taken to mitigate and or neutralize the risks, 
conflicting views, deviations and or misstatements 
that have been identified and for communication 
to the appropriate stakeholders where necessary. 


3.3.9 Development of Appropriate Process and 
Procedures for Periodic Review of the OCS 


A practitioner and or a QCR of a firm or a reporting 
entity (depending on whether it conducts external and 
or internal assurance engagement) shall conduct an 
assessment of the QCS on a periodic basis, and at least 
once in every two years to: 


a) Assess the deviations and significance of the 
deviations identified and accordingly take 
appropriate corrective actions that is required, 
followed by making necessary revisions, as 
required, and 

b) Communicate and conduct training on the findings 

and revisions, if any, for the concerned stakeholders 


for making the QCS further more effective. 
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4 CORE REQUIREMENTS PERTAINING 
TO THE METHODOLOGY OF ACCEPTING, 
CONDUCTING, REVIEWING, MAINTAINING 
DOCUMENTATIONS AND CONDUCTING 
QUALITY CONTROL OF ASSURANCE 
ENGAGEMENTS 


4.1 Acceptance and or Continuation or 
Discontinuation or Withdrawal or Rejection of an 
Assurance Engagement 


The following provides the basis of acceptance and 
or continuation or discontinuation of an assurance 
engagement by a practitioner. 


4.1.1 Basis of Acceptance and or Continuation of an 
Assurance Engagement 


Prior to the acceptance and or continuation of an 
ongoing assurance engagement, a practitioner shall 
ensure that an assurance engagement satisfies each of 
the following requirements: 


a) Requirements Relevant to Reporting Entity: 


1) There is no conflicting relationship with the 
reporting entity or with any of the stakeholders 
of the reporting entity, depending on the 
circumstances of the assurance engagement 
(NAFIAE); 


The behavior of the reporting entity shall be 
transparent and fair in its dealings with the 
assurance engagement team and shall provide 
all information to the assurance engagement 
team within the agreed time-frame; and 


2) 


3) The reporting entity is not involved in 
any misconduct or non-compliance with 
regulations based on primary due-diligence 


and inquiries conducted. 


b) Requirements Relevant to Assurance 


Engagement Team: 


1) Each member of the assurance engagement 
team shall be free in their own state of 
mind and maintain complete objectivity 
in the assurance engagement; and have an 
appropriate understanding of the requirements 
of the assurance standard. 

2) The members of an assurance engagement 
team shall have the appropriate competence, 
professional and educational qualification, 
skillset, experience and expertise to assess the 
subject matter and its information based on the 
suitable technical reference that is available 
universally or developed by the reporting 
entity; 


3 


a 


Every member of the assurance engagement 
team individually and collectively shall have 
the appropriate expertise to provide sufficient 
confidence to the practitioner to be able to 
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~ 


d) 


4) 


Requirements 


form an appropriate assurance opinion for the 
assurance engagement; and 


No practitioner shall conduct and or issue 
signed and dated assurance reports for 
assurance engagements, beyond the specified 
limit of what has been prescribed in the QCS 
of the firm and or beyond the applicable legal 
requirements. 


Relevant to Assurance 


Engagement: 


1) 


2) 


3) 


The assurance engagement shall be conducted 
“in accordance with Part 1 of the Assurance 
Engagement Standard’; 


The assurance engagement shall clearly define 
and demarcate the roles and responsibilities of 
the reporting entity and assurance engagement 
team, as applicable; and 


All key terms and conditions, inclusive 
of the scope of work shall be specified in 
sufficient details and shall be agreed upon 
with the reporting entity in any suitable form 
in a dated contractual agreement that shall be 
signed off by the practitioner and authorized 
representative of the reporting entity. The 
minimum key content that shall be present 
in an assurance contractual agreement is 
prescribed in Annex J. 


Requirements Relevant to Subject Matter and 
its Related Information: 


1) 


2) 


3) 


4) 


It shall agreed in advance with the reporting 
entity on the subject matter and the information 
for which a ‘Reasonable’ and or ‘Limited’ type 
of assurance engagements shall be conducted; 


The subject matter and performance that shall 
be reported shall be appropriate to the reporting 
entity, its concerned stakeholders and to the 
situation in which it is being reported; 


The performance of a subject matter to be 
informed shall satisfy the requirements of the 
essential qualities of the Technical Reference, 
to facilitate the concerned stakeholders in their 
decision-making process; 


The Technical References that shall be applied 
for assessment of the subject matter and its 
information, is relevant and: 


i) Is globally available and acceptable; and 


ii) If not globally available but has been 
indigenously developed by the reporting 
entity, then such a technical reference shall 
bear sound reasoning and scientific basis. 
Such technical references shall be made 
available to concerned stakeholders to 
facilitate them to understand the relevance 
of such a technical reference and how the 
subject matter and its related performance 
has been assessed. 


The practitioner shall accept or continue an assurance 
engagement only when the all the basis on which the 
engagement is to be performed has been agreed upon 
with the reporting entity. 


4.1.2 Basis of Discontinuation or Withdrawal or 
Rejection of an Assurance Engagement 


If a practitioner is not satisfied with the presence of the 
requirements specified in the aforesaid clause, prior to 
conducting an assurance engagement, the practitioner 
shall communicate to the firm and to reporting entity 
the reasons for non-acceptance of the assurance 
engagement or withdrawal or resignation from the 
assurance engagement. 


In the event, the practitioner conducts such an 
assurance engagement owing to a legal requirement 
or for any other reason, the reason for the same shall 
be documented in agreement with the QCR. Further, it 
shall be deemed that if such an assurance engagement 
does not meet the requirements of this assurance 
standard, then, such an assurance report issued in this 
context shall not make any mention of this standard nor 
shall state “in accordance with Part 1 of the Assurance 
Engagement Standard’. 


4.2 Planning an Assurance Engagement Post 
its Acceptance for Conducting the Assurance 
Engagement 


4.2.1 Audit Plan 


During the course of planning for conducting an 
assurance engagement, the practitioner based on 
the technical understanding and knowledge that 
the practitioner has on the subject matter and its 
information, in conjunction with the sense of reasoning, 
assurance skills and techniques shall: 


a) Provide necessary pre-assurance training and 
guidance to the assurance engagement team 
members, as considered necessary, on the overall 
methodology, processes and procedures to be 
applied for conducting the assurance engagement. 

b) Develop the audit programme and audit plans 

accordingly, ensuring completion of the assurance 

engagement within the time-schedule allotted for 
the assurance engagement. 


Develop appropriate procedures for audit of 
the subject matter and information that shall be 
reviewed, based on relevant technical reference. 

d) Define to every assurance engagement team 
member, their appropriate role and responsibility 
while conducting the specific procedures across 
respective functions, sites, or activities based on 
the educational qualification, technical knowledge, 
skills, expertise, competence and effectiveness 
that the practitioner has on the technical reference. 
e) Develop and document the rationale behind an 
appropriate sampling procedure that shall ensure 
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that the sample scientifically represents the 
entire population and provides the desired level 
of confidence to the extent necessary to draw an 
appropriate conclusive opinion. 


4.2.2 Justification for Withdrawal and or Resignation 
from the Assurance Engagement 


a) During the course of planning an assurance 
engagement, the assurance engagement team 
members may conduct further due-diligence at 
their end and learn or gather or generate credible 
information that: 


1) The subject matter and its information of the 
reporting entity shall not be able to meet the 
essential qualities of a technical reference, 

2) The reporting entity is involved in misconduct 
and or is in serious non-compliance with 
applicable laws and regulations, other than 
already informed to the practitioner prior to 
the acceptance of the assurance engagement 
contractual agreement, and 
3) Any other relevant information, which would 
have otherwise led to non-acceptance or 
continuation of the assurance engagement, 
had the information been available prior to 
acceptance of the assurance engagement 
contractual agreement. 


Under such circumstances mentioned above, the 
assurance engagement team member shall bring the 
matter before the attention of the practitioner. The 
practitioner in consultation with the QCR shall assess 
the risks that could emanate from such deviations and 
take appropriate corrective measures to mitigate the 
risks. Further, the practitioner shall consult on the same 
with the reporting entity, if the risk has to be mitigated at 
their end or has to be mitigated in mutual co-ordination 
with the reporting entity. If the risk cannot be mitigated 
to an acceptable level, the assurance practitioner shall 
decline or withdraw or resign from the assurance 
engagement, as felt appropriate. 


4.3 Conducting an Assurance Engagement 


4.3.1 Assessment of Performance as per the Assessment 
Elements (AE) 


a) While conducting an assurance engagement for a 
reporting entity, an assurance engagement team 
shall conduct a review of the characteristics of 
the processes and procedures developed by a 
reporting organization for the subject matter 
and its information that mirror each of the five 
assessment elements, as presented in Table 2. 

b) An assurance engagement team shall assess the 

status of the compliance with the characteristics of 

each of the Assessment Elements for the process 
and procedures that have been developed for the 
subject matter and its information. 
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Table 2: The Five Assessment Elements and the Characteristics to be 
evaluated for the Process and Procedures Developed 


[ Clause 4.3.1 (a) and (b) ] 


Assessment Element 


Characteristics to be Evaluated for 
Processes Developed for 


Characteristics to be Evaluated for Procedures 


Developed for 


Accessibility of 
Stakeholders-Engagement, 
Consultation, Management 
and Valuing the Stakeholder 
Relationship 


Effectiveness, appropriateness and adequacy 
of the process developed for the following: 


a) Engagement with concerned 
stakeholders to identify and capture the 
stakeholder’s reasonable expectations; 
and 


b) Appreciation and acknowledgement of 
the value created over time by various 
stakeholders. 


Measures and strategies taken for: 


a) 


b) 


c) 


d) 


e) 


Equal accessibility to various categories of 
stakeholders, with a focus on such stakeholders who 
are impacted by or may impact the reporting entity, 
for the purpose of identification of matters that are of 
concern; 


Effective engagement and consultation to identify 
issues that are material to the stakeholders and 
communication of the same to the ones who are 
in charge of management and governance in the 
reporting entity; 


Resolving matters that are concerning the 
stakeholders; 


Meeting the reasonable expectations expressed by 
stakeholders that are within the reach of the reporting 
entity; 

Facilitating decisions and outcomes that are balanced; 
and 


Managing and strengthening relationship with 
stakeholders, by primarily focusing on matters 
that are material to the sustenance of the reporting 
entity, improvement of relationship and reduction 
of conflicts between the reporting entity and its 
stakeholders. 


Materiality 


Effectiveness, appropriateness and adequacy 
of the process developed for: 


a) Materiality assessment; and 


b) Integration of the material matters in 
key management decisions. 


a) 


b) 


c) 


d) 


For the concerns identified in consultation and 
engagement with stakeholders, the relevance and 
assessment of the degree of significance of the risks 
and opportunities and their impact on the reporting 
entity’s overall sustenance and or ability to create 
value for such stakeholders; 


Reliability of the subject matter information 
evaluated on the basis of either publicly available 
suitable technical reference or otherwise, as per 
technical reference that has been developed by the 
reporting entity; 

Decisions, measures and strategies taken by the 
management and or the governing body of the 
reporting entity for mitigation of the concerns 
emerging from the material issues; 


Implications on the reputation or brand or investment 
or other key sustenance aspects for intentionally or 
inadvertently missing out or not addressing subject 
matters that are of material importance to the 
reporting entity and concerned stakeholders, while 
reporting. 
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Assessment Element 


Characteristics to be Evaluated for 
Processes Developed for 


Characteristics to be Evaluated for Procedures 


Developed for 


Implementation and 
Monitoring 


Effectiveness, appropriateness and adequacy 
of the process developed for: 


a) The periodic monitoring of subject 
matter and its information by the 
reporting entity; 

b) Enhancement of the capacities of 
resources and relevant technologies, if 
any, for further improvement. 


a) 


b) 


c) 


d) 


e) 


Implementation of strategies taken for achieving the 
targeted performance of a subject matter; 


Effective utilization of various forms of resources in 
the implementation of its strategies; 


Challenges emanating on account of regulatory 
and or technological and or societal changes in the 
implementation of such strategies; 


The competitive advantage such strategies shall have 
over its peers; 


Logic and science is applied in the achievement 
of performance of the subject matter, further 
the performance target is specific, measurable, 
achievable, realistic and time-bound; 


Roles and responsibilities defined for concerned 
resources, to achieve the desired performance within 
the scheduled time-frame. 


The Effect/Value Created; 
and Comparability of 
Performance 


Effectiveness, appropriateness and adequacy 
of the process developed for the evaluation of 
the effects, externalities and value created by 
a subject matter. 


a) 


b) 


c) 


d) 


e) 


g) 


h) 


The subject matter satisfies the requirements of the 
essential qualities of a technical reference based on 
which the performance is evaluated and reported; 


The completeness, reliability and accuracy of the 
change in the performance of the subject matter over 
its baseline; 


Evaluation of the effects, i.e. any change and or value 
created and or cost of externalities in the form of: 


1) qualitative and or quantitative; 


2) monetized or non-monetized, wherever 
practicable; 


3) direct and or indirect; 


4) intended and or unintended; and 


5) positive and or negative; 

Comparison of the performance of the subject matter 
with: 

1) the previous performance; and or 

2) the peers; and 


3) the market trend/practice, with a special 
emphasis on matters that are more material, 
appropriate and relevant to the nature of activity 
or services of the reporting entity; 

SWOT (Strength, Weakness, Opportunities and 


Threats) analysis of the adverse and positive effects 
respectively; 


The means of mitigating the negative adverse 
impacts; 

The potential threats in negative and or positive 
scenarios, if any; 


Corroborating the results to assess material 
misstatements, if any. 
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Table 2 ( Concluded) 


Assessment Element 
Processes Developed for 


Characteristics to be Evaluated for 


Characteristics to be Evaluated for Procedures 
Developed for 


on 


Responding to Stakeholders 


Reasonable Expectations 


their Concerns and | of the process developed for: 


information; and 


b) to the 


the 


Communication 
stakeholders of 
the 


and providing them 


scenario. 


Effectiveness, appropriateness and adequacy 


a) Documenting the subject matter and its 


concerned 
actions 
initiatives taken by a reporting entity 
holistic 


and 


a) Presence of the “Essential Qualities’ in the subject 
matter reported, 


Effective communication of the: 


1) 


b) 
concerns and issues, with a focus on reasonable 
concerns and expectations of stakeholders; 


2) 
3) 


matters that are material to the stakeholders; 


action plans to be 


implemented; 


implemented and or 


4) challenges faced in the non-implementation of 
various activities; and in its impact on the ability 
to create value for its stakeholders, in the short, 
medium and long term; and 

5) 


reasons for significant changes 


disproportionate outcomes, if any; 


or 


6) future strategic directions based on past learning 
and cautions that have been exercised, as felt 


necessary for reporting futuristic subject matter; 


7) performance and or compliance in view of 
changing business environment and uncertainty 
regarding achievability, if any, inclusive of 
communicating factors that may alter the 


intended futuristic targets; and 
c) 


Whether the information reported is complete; fair; 
balanced; logical; substantive; comprehensive; 
timely; precise; has full clarity, logically 
structured and well presented; written in clear and 
layman’s language; is able to navigate a reader 
effectively to other related or relevant sections and 
cross-referencing, as may be felt necessary by 
intended users; unbiased and non-manipulative 
to be received or perceived either favorably or 
unfavorably; the mode of the communication of 
the subject matter is readily available and or easily 
accessible to the concerned stakeholders; and the 
information is officially released by the authorized 
representative of the reporting entity. 


4.3.2 Key Matters that are Specific to the Roles and 
Responsibilities of Assurance Engagement Team while 
Conducting an Assurance Engagement 


Wh 


ile conducting an assurance engagement, the 


assurance engagement team: 


a) 


b) 


c) 


Shall conduct the assurance engagement as per 
the role and responsibilities defined to them at the 
planning stage. 


Shall conduct the review of the assurance 
engagement, as per the characteristics presented 
in Annex B, pertaining to ‘Reasonable’ and or 
‘Limited? type of assurance engagements as 
applicable. 


Shall assess the appropriateness ofthe competence, 
skill-set and expertise of the concerned individuals 
of the reporting entity, who have been assigned 
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d) 


with the responsibility to develop the process and 
procedures and execution of tasks pertaining to the 
characteristics of each of the assessment elements. 


Shall identify risks and material misstatements in 
the procedures developed for the subject matter 
and its information. 


Shall request for appropriate and relevant 
undertakings from the reporting entity, followed 
by application of their professional skepticism 
to assess the risks and the significance that such 
undertakings carry, prior to their acceptance or 
rejection of the undertakings. 


Shall discuss on conflicting matters with other 
assurance engagement members, the practitioner, 
QCR and other appropriate experts, if required, 
to jointly agree and arrive at the most appropriate 
and justifiable decision. 


g) 


h) 


)) 


Shall conduct the assessment of the subject matter 
and its information based on the publicly available 
technical references; and intheabsence ofa publicly 
available technical reference, if a new technical 
reference has been indigenously developed for the 
evaluation of the subject matter by the reporting 
entity, which is not publicly available, then the 
assurance engagement team shall ensure that they 
have the appropriate expertise that is required for 
conducting the requisite assessment. 


May refer to reports that have been prepared 
for the reporting entity by external parties while 
conducting an assurance engagement. The 
assurance engagement team shall acknowledge 
that mere acceptance of the reports does not nullify 
the accountability of the assurance engagement 
team, hence, the assurance engagement team shall 
conduct appropriate due diligence and assessment 
of such reports to get the requisite confidence to 
take responsibility for the subject matter assessed. 


Shall withdraw from conducting the assurance 
engagement, in consultation with the practitioner 
and the QCR if any conflict is identified, which 
may lead to impairment of objectivity and or for 
any justified reason identified. 


4.3.3 Key Matters that are Specific to the Role and 
Responsibilities of a Practitioner While Conducting an 
Assurance Engagement 


While conducting an assurance engagement, the 
assurance practitioner: 


a) 


b) 


c) 


Shall assess and evaluate whether the subject 
matter and its information is free of material 
misstatements and is appropriate to the conditions 
to form an appropriate assurance conclusion. 


May be informed by the assurance engagement 
team of a significant undesirable and or an 
unpleasant outcome, which shall or may carry 
a high risk. The same shall be escalated to the 
concerned QCR and accordingly, based on reasons 
felt justified, both the QCR and the practitioner 
may bring the matter before the attention of 
the reporting entity and or regulatory and or 
professional bodies, as felt necessary. 


Shall withdraw, decline or resign from the 
assurance engagement, in consultation with the 
reporting entity, the practitioner and the QCR for 
any conflict or circumstance or justified reason 
identified. 


4.3.4 Key Behavioral Matters to be Considered while 
Conducting an Assurance Engagement by all Members 
of the Assurance Engagement Team 


While conducting an assurance engagement, the 
assurance engagement team shall: 
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a) 


b) 


c) 


d) 
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Ensure that they shall not be in violation with any 
of the requirements, specified in this assurance 
standard. 


Conduct the assurance engagement within the 
time-frame agreed with the reporting entity; 
and based on the procedures that were drafted 
during the planning stage; or otherwise, revise 
the procedures, to suit the adequacy and or 
appropriateness of the conditions, based on 
the judgment of the assurance engagement 
team member(s) and the situations in which the 
assurance engagement shall be conducted. 


Remain alert and seek necessary guidance and 
support from the other members of the assurance 
engagement team, their supervisors, and or the 
practitioner, wherever felt necessary. 


Apply their professional skill while conducting 
consultation with concerned stakeholders; collect 
appropriate proof of evidences and information 
by conducting review of the documents and or 
physical inspection at relevant sites or consultation 
with relevant stakeholders; evaluate the quantity, 
quality, sufficiency, adequacy and appropriateness 
ofall evidences and information gathered. 


4.4 Drafting a Provisional Assurance Conclusion 


4.4.1 Drafting of Provisional Assurance Opinion by 
Practitioner(s) 


a) 


b) 


c) 


The practitioner(s) having been satisfied with the 
work conducted by the assurance engagement team 
shall draft an appropriate provisional assurance 
report that is suitable in the given situation. The 
provisional assurance report shall include in it all 
information that is mentioned in Annex C, except 
the signature of the practitioner and the date. 


For an assurance engagement conducted as per 
this standard, it is mandatory to mention in the 
assurance report that the assurance engagement 
has been conducted “in accordance with Part 1 of 
the Assurance Engagement Standard’ subject to 
the condition the assurance engagements meet the 
requirements of this standard. In the absence of 
such a mention, the conclusive opinion formed and 
issued by the practitioner in the assurance report 
shall be deemed that it is as not in accordance with 
the requirements of this standard. 


In the event, for a subject matter and its information 
that had already been agreed upon with the 
reporting entity that a reasonable assurance 
engagement shall be conducted; should such a 
subject matter and or information fail to qualify 
the requirements specified against the reasonable 
assurance engagement in Annex B but fulfills the 
criteria defined for limited assurance engagement, 
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as prescribed in Annex B, then the practitioner 
shall issue a limited assurance opinion for such a 
subject matter and its information. 


d) In the opinion of the practitioner, if a standard 
form of assurance conclusion cannot be provided 
by the practitioner, as per characteristics provided 
in Annex B, on account of non-adherence with 
the requirements specified in this standard, then 
a revised form of assurance conclusion can be 
prepared by the practitioner that is appropriate to 
the conditions. 


e) If multiple practitioners of varying subject matters 
have conducted an assurance engagement, a firm 
on the basis of its agreement with the reporting 
entity has the following options of issuance of an 
assurance report: 


1) Separate assurance report — Each of the 
practitioners shall either submit their own 
separate provisional assurance report for the 
part of assurance engagement conducted by 
them; or 


2) Integrated assurance report — As defined 
in the QCS or as agreed with the reporting 
entity, an integrated appropriate provisional 
assurance report shall be submitted by any 
of the practitioner, on behalf of the other 
practitioners. Such an integrated assurance 
report shall be prepared on the basis of the 
separate assurance reports drafted by each of 
the other practitioners (of their individual areas 
of assurance). Such an integrated assurance 
report shall accurately represent the contents of 
the assurance reports that have been prepared 
by all other practitioners. The consensus of all 
the practitioners shall be taken in written and 
duly recorded in internal procedures, for the 
integrated assurance report drafted. 


4.4.2 Requirements of the Letter-head on Which the 
Provisional Assurance Opinion shall be Drafted 


The assurance report to be submitted shall be in 
compliance with the following: 


a) In case of submission of an assurance report by 
the Lead External Assurance Practitioner (LEAP) 
of a firm — The provisional assurance report shall 
be submitted on the letter-head of the firm. The 
letter-head at a minimum should carry the name 
of the firm and logo, where available, contact 
co-ordinates of the registration office of the 
firm; and the registration number of the firm that 
had been issued by the competent authority for 
conducting assurance engagements. 


b) In case of submission of an assurance report by 
the Lead Internal Assurance Practitioner (LIAP) 
of a reporting entity — The provisional assurance 
report shall be submitted on the letter-head of the 


reporting entity. The letter-head at a minimum 
should carry the logo and name of the reporting 
entity and contact co-ordinates of the reporting 
entity. 


4.5 Conducting Quality Review of the Assurance 
Engagement 


Post completion of the assurance engagement, an 
independent quality review of the same shall be 
conducted by a QCR who has remained independent 
in the proceedings of the engagement, in consultation 
with the appropriate members of the assurance 
engagement team. The QCR shall have the appropriate 
qualification, expertise and technical understanding of 
the subject matter and the information to be reviewed 
and technical reference based on which the subject 
information shall be reviewed. 


The QCR, in consultation with the assurance 
engagement team shall conduct an objective evaluation 
of the judgments made in an assurance engagement, by 
the assurance engagement team. The evaluation shall 
involve, review of: 


a) The methodology in conducting the assurance 
engagement. 


b) Various procedures that were developed and 
applied for collection and gathering of appropriate 
proof and information for subject matter and its 
information. 


c) The relevant information and documentations that 
have been gathered in the course of conducting the 
assurance engagement. 


d) The internal and or external feedback and or 
accusation and or concerns and or complaints 
received from any of the member(s) of the 
assurance engagement team or reporting entity or 
any other stakeholder, pertaining to the assurance 
engagement; hold discussion with any such 
stakeholder, if felt appropriate. 


e) The significant matters that have emanated from 
the assurance engagement. 


f) The conflicting matters yielding in significant 
concerns, followed by holding discussions on such 
matters with the concerned assurance engagement 
team members in the presence of professional 
experts, wherever required, to arrive at a justifiable 
common consensus that is technically acceptable; 
and accordingly documenting the decisions that 
have been arrived at, and the rationale behind 
arriving at such decisions. 


g) The appropriateness and adequacy of the contents 
of the provisional assurance report. 
4.6 Issuance of a Dated and Signed Assurance 
Report 


a) Post completion of the documentation of an 
assurance engagement, if felt necessary and or 


b) 


c) 


appropriate by the QCR, a copy of the provisional 
assurance report may be shared by the practitioner 
with the reporting entity for identification of 
material errors, if any. The QCR shall be kept in 
the loop of all such communications. 


Based on feedback received, if any, from the 
reporting entity, the provisional assurance 
report shall be corrected, if felt appropriate and 
necessary by the practitioner, in consultation with 
the QCR and relevant assurance engagement team 
member(s), if any; and 


A signed and dated assurance report shall 
thereafter be issued to the reporting entity by the 
practitioner, post the receipt of formal approval 
from the QCR. 


4.7 Documentation of an Assurance Engagement 


Post issuance of a dated and signed audit report to the 
reporting entity, the practitioner, shall in co-ordination 
with the assurance engagement team: 


a) 


b) 


c) 


Complete the documentation of the assurance 
engagement, by ensuring that the documentation 
includes a minimum of the information mentioned 
in Annex K. 

Take the responsibility of compiling, 
maintaining and storing appropriate engagement 
documentations. Each of such documents to be 
stored shall be dated and shall bear the following: 
1) Signature of both the QCR and the practitioner; 


2) of the respective 
team member, 


assurance 
where felt 


Signature 

engagement 
necessary; and 
3) Signature of the authorized representative of 
the reporting entity, wherever felt appropriate. 


Retain the assurance engagement specific 
documentations, for an appropriate time that is 
deemed appropriate as per the requirements of the 
law or as per agreement signed with the reporting 
entity or as per the QCS policy, whichever is 
higher to serve the following purpose: 


1) Any specific legal requirement; and or 


2) To facilitate any experienced practitioner, and 
or QCR and or any other personnel having no 
connection with the assurance engagement 
to easily understand how the assurance 
engagement was conducted and delivered; and 
or 


3) For any other future reference. 


4.8 Managing Material Discrepancies and Variations 
Post Release of an Assurance Report 


Post issuance of a dated and signed assurance report, 
the assurance engagement team may: 


a) 


Receive some accusations or complaints from 
internal and or external stakeholders, pertaining 
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b) 


Under 
consultation with the QCR shall: 


a) 
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to non-adherence with the requirements of this 
standard by the assurance engagement team, 
SME, QCR, firm while conducting the assurance 
engagement; and 


Identify or become aware ofa material discrepancy 
or variation and or misstatements pertaining to 
subject matter and the information on which an 
assurance report has already been issued. 

in 


such circumstances, the practitioner 


1) Inform the same to the reporting entity, if 
felt appropriate and accordingly assess the 
significance of the risk emanating from 
such variations and or misstatements for 
the reporting entity, and accordingly, take 
appropriate corrective and remedial measures 
to mitigate and manage the risk; 


Assess whether the variations and or 
misstatements were intentional or have 
occurred by mistake or conducted with 
deceptive intention; and accordingly, take 
appropriate corrective measures and or 
disciplinary and or regulatory actions; 


2) 


3) Suggest for taking appropriate actions 
on relevant individuals of the assurance 
engagement team, if felt appropriate; 

4) Promptly intimate the variation and its 
significance on the subject matter to the 
regulators and or professional body and or to the 
stakeholders, inclusive of the ones, who could 
potentially be impacted, in consultation with 
the reporting entity; and accordingly, prepare 
and communicate an appropriate response on 
the variation or misstatement for information 
to concerned stakeholders based on available 
facts and discussions, in consultation with 
relevant members of the assurance engagement 
team and or the reporting entity and or other 


individuals, as felt appropriate; and 


Seek appropriate legal opinion and 
necessary support, as felt appropriate in such 
circumstances. 


5) 


4.9 Periodic Assessment of the QCS 


A firm or a reporting entity (depending on whether 
it conducts external and or internal assurance 
engagement) shall conduct an assessment of the 
QCS on a periodic basis, and at least, once in every 
two years. Such an assessment shall be carried out 
by a practitioner and or a QCR (who shall have a 
minimum of two years of experience in assurance 
engagement as per this assurance standard). Such 
an individual shall: 


1) Identify and evaluate the inadequacies and 
gaps in the existing QCS and QCS policy; 
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2) Make necessary changes and revisions in the and improving the understandability of the 
existing QCS, for further strengthening its revised QCS and QCS policy. 
process and its procedures, b) Post completion of the review of the QCS, the 
3) Revise the existing QCS policy, if felt practitioner and or the QCR in co-ordination 
necessary; and with the assurance engagement team shall ensure 
4) Effectively communicate the changes to the appropriate archiving of the old documentations 
concerned individuals, inclusive of assurance pertaining to the QCS and or the QCS policy, 
engagement team, for further strengthening which Pa be easily retrieved, as and when 
required. 
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ANNEX A 
( Clause 1.1) 


SELECT TYPE OF REPORTS AND OR INFORMATION 
(MATTERS OTHER THAN STATUTORY FINANCIAL INFORMATION) 
THAT ARE USUALLY REPORTED BY A REPORTING ENTITY 


The following provides an indicative list of reports 
and or information that are reported by a reporting 
entity, for internal and or external purpose, on which an 
assurance opinion can be issued to the reporting entity, 
on the basis of this assurance standard: 


a) Information and or performance relevant to 
environmental, social, core sustainability, 
developmental and or corporate social 
responsibility, economic and or other matters, 
primarily the ones which are non-financial, based 
on the following: 


1) Country specific national standards, relevant to 
reporting of information, other than statutory 


financial information, such as, National 
Guidelines on Responsible Business Conduct 
(NGRBC), Business Responsibility and 


Sustainability Reporting (BRSR) mandated by 

SEBI for some categories of companies etc. 
2) Various forms of international standards, such 
as, Global Reporting Initiative’s Standards, 
United Nation’s Global Compact’s Universal 
Principles, ISO 26000, UN's Sustainable 
Development Goals, Integrated Reporting 
(<IR>) framework of International Integrated 
Reporting Council (IIRC), etc. 
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3) Any othernationaland orinternational 
non-financial based framework. 


b) Information and or performance relevant to 
environment friendly and or any form of cleaner 
technology; 


c) Information and or performance relevant to Green 
or Sustainability Financing, Environmental, Social 
and Governance (ESG), Green/Sustainability 
bonds, etc; 


d) Information pertaining to Subject Matter 
Categories (SMC) referred in the Part 3 of this 
Standard; 


e) IS 26001; 


f) Environmental or any form of sustainability 
labeling; 


g) Impact assessment information of not for profit 
organizations; and 


h) Any other performance or information, relevant to 
matters other than statutory financial information 
of a reporting entity or of any other organization 
across its supply chain or any such organization 
that is of relevance to the reporting entity. 
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ANNEX B 


[ Clauses 2.6 a), 4.3.2 b), 4.4.1 c), d), Annex C s) and Annex Jj) | 


CHARACTERISTICS OF A “LIMITED” OR “REASONABLE” 
TYPE OF ASSURANCE ENGAGEMENTS 


SI Characteristics “Limited” Type of Assurance ‘Reasonable’ Type of Assurance 

No. Engagement (LAE) Engagement (RAE) 

a) (2) (3) (4) 

i) Assurance type Low High 

ii) | Type of subject matter | Typically applied for other than | Any information that has a legal connotation 
information that is | whatismentioned for ‘Reasonable’ | or financial implication or is material, with 
primarily assured Assurance Engagements. a purpose to provide a higher level of 

confidence to intended users. 

iii) | Timing of review Requires a short time span Fairly extensive time period 

iv) | Significance ofsubject | The subject matter informed |The subject matter informed is reliable, 
matter informed is plausible; hence, a negative | consistent and accurate; hence, a positive 

assurance opinion can be issued | assurance opinion can be issued on the 
on the same. same. 

v) [Focusof Assurance |Process of the assessment) a) Process and procedures of the 

elements. assessment elements; and 
b) Subject matter information satisfies 
the requirements of all the essential 
qualities of a technical reference. 

vi) |Extent of procedures | a) Procedures are significantly | a) Slightly lesser, in comparison to an 
conducted and level of less; and absolute assurance; 
confidence bestowed b) The practitioner gathers) b) Involves extensive procedures; and 

sufficient confidence that} c) An auditor provides reasonable 

the subject matter and its confidence to the intended users that 

information is plausible to the subject matter and its information 

provide a level of confidence is reasonably free of any material 

to intended users. misstatement. However, there still 
remains a possibility that in some 
instance(s) the misstatements may go 
undetected. 

vil) | Extent of evidence | a) Less extensive, the evidence| a) Unrestricted and a deep-dive extensive 
gathering for the gathering is limited to the sampling and evidence gathering 
information of the extent that an auditor finds exercise, across all levels, supported by 
subject matter the information “worthy of collection of sufficient corroborative 

belief” to have the minimum evidence, to an extent that the 
confidence to issue an practitioner considers it reasonable, 
assurance opinion, b) Conducting a detailed review to obtain 

b) Conducting a limited sufficient and appropriate evidence and 
sampling and analytical identify the possibility of any material 
evidence gathering and misstatement of the subject matter and 
inquiry exercise, its information, by carrying out a: 

c) Extent of evidence gathering 1) Review, on the basis of an 
is generally limited to appropriate technical reference; 
obtaining inputs from 2) Review of the effectiveness of 
internal stakeholders. processes, procedures and internal 

controls; and 

3) Consultation with appropriate 
internal and external stakeholders, 
inclusive of board level 
functionaries. 
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SI Characteristics “Limited” Type of Assurance ‘Reasonable’ Type of Assurance 

No. Engagement (LAE) Engagement (RAE) 

Q) (2) (3) (4) 

viii) | Form of assurance Negative form of assurance | Positive form of assurance 
opinion/conclusion opinion/conclusion 

ix) |Standard form of | Examples of assurance | Examples of assurance opinion/ conclusion 

assurance conclusion |opinion/conclusion are stated | are stated below: 

below: 


a) Based on the procedures 
performed, in our opinion, 
nothing has come to our 
attention that causes us to 
believe that the reporting 
entity is not in compliance, 
in all material respects with 
the applicable laws. 


b) Based on the procedures 
performed, in our opinion, 
nothing has come to our 
attention that causes us 
believe that the information 
reported by the reporting 
entity is in all material 
respects is misstated. 


c) Based on the procedures 
performed, in our opinion, 
nothing has come to our 
attention that causes us to 
believe that the following, 
by the reporting entity 
in all material respects is 
inappropriate or misstated: 


1) Process and procedures 
developed by the 
reporting entity, and 


2) Information reported by 
the reporting entity. 


a) Based on the procedures performed, in 
our opinion the reporting entity, in all 
material respects is in compliance with 
its applicable laws. 


b) Based on the procedures performed, 
in our opinion, for the performance 
reported by the reporting entity in all 
material respects is fairly stated. 


c) Based on the procedures performed, 
in our opinion, the following are in all 
material respects are appropriate and 
fairly stated: 


1) Process and procedures developed 
by the reporting entity, and 


2) Information reported by 
reporting entity. 


the 


NOTE -- IS 26001 shall be issued on the basis of “Reasonable” type of assurance engagement of this standard. 
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ANNEX C 
( Clauses 2.21, 2.7 and 4.4.1 ) 
EXPLICIT CONTENTS OF AN ASSURANCE REPORT 


An assurance report shall include the following items 
on the letter-head of the firm or reporting entity 
(as the case may be, depending on whether the 
assurance engagement is internal or external): 


a) The title “Independent Internal/External assurance 
report for an assurance engagement conducted as 
per Part | of IS 26002”; 


b) An addressee (say the board, top/executive 
management, etc. to whom the assurance report is 
being addressed); 


c) Description of the context behind reporting the 
subject matter; and accordingly the overall scope, 
inclusive of disclosures covered, exclusions and 
limitations, if any, in the assurance engagement; 


d) Description of the methodology applied and an 
informative summary of the work performed, 
inclusive of the process and procedures, while 
conducting the assurance engagement, to form the 
basis for the practitioner’s conclusion; 


e) An identification or description of the nature of 
assurance engagement, that is, whether: 


1) Reasonable and or Limited type of assurance 
engagement; and 


2) Attested or Direct assurance type of assurance 
engagement. 


f) Description of the subject matter and its related 
information; 


g) Description of the responsibilities of the reporting 
entity and the: 


1) The assurance engagement team, in case of 
internal assurance engagement; and 


2) Firm and the assurance engagement team, 
in case of external/internal assurance 
engagement. 


h) Mention of the references of the following in the 
assurance report, if have been applied in drawing a 
conclusion for the subject matter information and 
in the preparation of the assurance report: 


1) Other audit reports of the reporting entity; and 
2) Work done by other persons. 


j) Mention of the source of the publicly available 
technical reference that had been applied in the 
measurement or evaluation of the subject matter, 
In the event that a new technical reference has 
been indigenously developed by the reporting 
entity, which is not publicly available, then the 
practitioner shall give a clear description of the 
new technical reference that has been developed 
and or assumptions considered by the reporting 
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k) 


entity, to provide a clear understanding to the 
concerned stakeholders; 


Mention of all such matters that have been relied 
upon by the lead practitioner on subject matter 
experts; 


Description of any limitation that is felt significant, 
wherever, felt necessary to caution the concerned 
stakeholders; 


A separate statement on each of the following: 


1) That the assurance engagement was performed 
‘in accordance with Part 1 of the IS 26002’; 


2) Complete independence has been maintained 
by the assurance engagement team, the SME, 
the QCR and the firm, while conducting the 
assurance engagement; 


3) Specific to limited type of assurance 
engagement the following statement has to be 
clearly mentioned in the assurance statement: 


The procedures performed in a Limited type of 
assurance engagement are less in comparison to a 
Reasonable type of assurance engagement. Hence, 
the level of assurance obtained in a Limited type 
of assurance engagement is lower in comparison to 
Reasonable type of assurance engagement. 


p) 


q) 


t) 


Risks that are material to the reporting entity, 
within the scope of the assurance engagement, if 
have been omitted or explicitly not mentioned in 
the report, within the context of reporting for the 
objective; 

Status of adherence with the characteristics of 
the process and or procedures, mentioned for 
each of the Assessment Elements, followed by 
mention of the key observation(s) and broad 
recommendation(s), if any; 


The gaps in details and specific recommendations, 
if any | 

For the characteristics audited against each of 
the assessment elements, express an overall 
conclusive opinion in the form of a standard 
conclusion, presented in Annex B; or otherwise, 
express the opinion in a revised form, if there are 
deviations observed; 


Any specific information to improve the 
understanding of concerned stakeholders, for 
improved decision making: 


Mention the name of the practitioner and the 
professional registration number that has been 
issued by the competent authority and or any other 
professional institute * that is recognized by an 
appropriate regulatory/professional authority, 


w) The trademark/logo of the competent authority 


and the registration number that has been issued by 
the competent authority to the firm for conducting 
and issuing assurance report as per this assurance 
standard. Firms that have statutory constraints 
are exempted from the application/publication 
of logo/trademark of the competent authority in 
their assurance report, as deemed appropriate and 
necessary (NAFIAE). 
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y) 
Z) 


aa) 


IS 26002 (Part 1) : 2022 


The place from where the practitioner officiates 
and practises; and 

The signature of the practitioner, adjacent to the 
name and registration number mentioned; and 


The date on the assurance report. 
NOTES 
1 Not applicable for external assurance engagement. 


2 Such as Institute of Chartered Accountants of India, Medical 
Council of India, Institute of Companies Secretaries of India, 
etc. 
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ANNEX D 
( Clauses 2.12 and 2.14) 


ROLE AND RESPONSIBILITY OF VARIOUS STAKEHOLDERS IN A FIRST AND OR A SECOND 
PARTY INTERNAL ASSURANCE ENGAGEMENT 


Reporting Entity is interested in conducting an Internal Assurance Engagement 


Reporting Entity intends to report for self (First Party Assurance Engagement) and or assess for an 
external organization (Second Party Assurance Engagement) various subject matter and information 
related to Ground Water Recharge (GWR) comprising qualitative and quantitative information (and 

selects Manual on Artificial Recharge of Ground Water, published by Ministry of Water Resources as the 
suitable “Technical Reference” for evaluation and reporting): such information could be quantity of water 
recharged, food security enhanced, increase in livelihood, increase in per capita income vs national 
average (GDP basis), reduction in cost of social externalities, Social Returns on Investment, etc. 


Option # 1 - In-house resources have Option # 2 - Engages a Subject Matter 
requisite capability to evaluate qualitative Expert (SME) to evaluate qualitative and 
and quantitative information quantitative information 


SME post evaluation, hands over the information 
to the Reporting Entity 


SS 


Reporting Entity prepares the report independently or jointly with the SME 


LL II dL 


Option # 1: Reporting Entity Option # 2: Reporting Entity engages Option # 3: Reporting Entity 
engages its in-house its in-house assurance engagement engages a firm and its 
assurance engagement team team led by a sole practitioner assurance engagement team 

led by a LIAP who is internal (who is qualified both as a LEAP, as which is external to the 
to the Reporting Entity to well as LIAP) who is external to the Reporting Entity, led by a 
conduct an Internal Reporting Entity to conduct an LEAP to conduct an Internal 
Assurance Engagement Internal Assurance Engagement Assurance Engagement 


UU 


Assurance Engagement Team of a Reporting Entity, led by a 
LIAP performs the assurance service and submits the Internal 
Assurance Report to the Reporting Entity 


Assurance Engagement Team of a 
Firm, led by a LEAP performs the 
assurance service and submits 
the Internal Assurance Report to 
the Reporting Entity 
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ANNEX E 
( Clause 2.15 ) 


ROLE AND RESPONSIBILITY OF VARIOUS STAKEHOLDERS IN A THIRD PARTY BASED 
EXTERNAL ASSURANCE ENGAGEMENT 


Reporting Entity is interested in conducting an External Assurance Engagement 


Reporting Entity intends to report on various subject matter and information related to Ground 
Water Recharge (GWR) comprising qualitative and quantitative information (and selects Manual 
on Artificial Recharge of Ground Water, published by Ministry of Water Resources as the suitable 
‘Technical Reference’ for evaluation and reporting); such information could be quantity of water 
recharged, food security enhanced, increase in livelihood, reduction in cost of social externalities, 
Social Returns on Investment. etc. 


Option # 1 - Reporting Entity has in-house Option # 2 - Reporting Entity Engages a 

resources who have requisite capability to Subject Matter Expert (SME) to evaluate 

evaluate qualitative and quantitative qualitative and quantitative information 
information 


—r 


SME post evaluation, hands over the 
information to the Reporting Entity 


Reporting Entity prepares the report independently or jointly with the SME 


Reporting Entity engages a firm and its assurance engagement team which is external to the 
Reporting Entity, led by a LEAP to conduct an External Assurance Engagement 


Assurance Engagement Team of a Firm, led by a LEAP performs the assurance service and submits 
the External Assurance Report to the Reporting Entity 
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ANNEX F 
( Clause 3.3.2.2 ) 


INDEPENDENCE DECLARATION BY AN ASSURANCE ENGAGEMENT TEAM 
MEMBER/QUALITY CONTROL REVIEWER, WHO HAS CONDUCTED AN ASSURANCE 
ENGAGEMENT AS PER PART 1 OFIS 26002 


I, Dr./Mr./Ms. (name of the Assurance Engagement Team Member/Quality Control Reviewer), working for 
(name of the firm) (hereafter as firm’) bearing (employee code with the firm and ‘or’ BIS LEAP Registration 
Certificate) on this (date, in figure) day of the (name of the month) of the year (year in figure), hereby confirm 
the following: 


a) I had been informed of the implications of conflicts and breaches to the requirements of Part 1 of 
IS 26002 : 2021 Standards prior to conducting any assurance engagement as per this standard, and 


b) During the financial year (YYYY/ZZZZ), for all assurance engagements that were conducted by me for the 
firm, as per Part 1 of the Assurance Engagement Standard, I have not been in conflict nor have breached the 
independence requirements. 


I also hereby give my consent to cooperate and comply with any request made by the firm and or the competent 
authority, in furtherance of its authority and responsibilities under the Part 1 of the Assurance Engagement 
Standard, in connection to any assurance engagement, whereby, I had been involved as an assurance engagement 
team member/QCR, for what-so-ever purpose that either the (name of the firm) and or the competent authority and 
or any other regulatory authority of the Govt. of India feels is necessary. 


I also understand that my accord of confirmation and consent on the above is a condition of my continued 
employment with the firm and for conducting any assurance engagement as per the requirements of Part 1 of the 
Assurance Engagement Standard. 


Signature of the engagement team member/Quality Control Reviewer: 


Role played by the engagement team member in the past financial year [Auditor (with Designation)/Quality 
Control Reviewer]: 


Office location of the assurance engagement team member: 
Dated: 


Official Stamp of the organization: 
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ANNEX G 
( Clauses 3.3.2.2 and Annex J ) 


INDEPENDENCE DECLARATION BY A SUBJECT MATTER EXPERT (SME)/SOLE 
PRACTITIONER, WHO HAS BEEN ENGAGED TO CONDUCT AN ASSURANCE ENGAGEMENT 
AS PER PART 1 OF IS 26002 


I, Dr./Mr./Ms. (name of the SME/Sole Practitioner), employed with (name of the legal entity the SME 
works for)/as an independent service provider/as a sole practitioner bearing (employee code/LEAP registration 
number awarded by the competent authority) with my official address of (address), on this (date, in figure) day 
of the (name of the month) of the year (year in figure), hereby confirm the following: 


a) That I am being engaged by the (name of the firm) for conducting an assurance engagement as per 
Part 1 of the Assurance Engagement Standard for the reporting entity, (name of the reporting entity) for the 
engagement titled (title of the assurance engagement) for the financial year (mention the Financial Year); 


b) That I am currently not engaged in any activity with the aforementioned reporting entity that shall create 
a conflict or result in the breach of my independence, as per the requirements specified in Part | of the 
Assurance Engagement Standard for the assurance engagement, for which I have been engaged as a 
SME/Sole Practitioner; 


c) That I shall maintain my independence and shall not be in conflict with the assurance engagement until the 
completion of the assurance engagement. 


I also hereby give my consent to cooperate and comply with any request made by the firm or the competent 
authority in furtherance of its authority and responsibilities under the Part 1 of the Assurance Engagement Standard, 
in connection to any assurance engagement, whereby, I am being engaged as an engagement team member, for 
what-so-ever purpose that either the (name of the firm) or the competent authority or any other regulatory authority 
of the Govt. of India, feels is necessary. 


I also understand that my accord of confirmation and consent on the above is a condition for conducting any 
assurance engagement as per the requirements of Part 1 of the Assurance Engagement Standard. 


Signature of the SME/Sole Practitioner: 


Office location of the SME/Sole Practitioner: 


Dated: 


Official Stamp of the organization: 
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ANNEX H 
( Clause 3.3.2.2 ) 


INDEPENDENCE DECLARATION BY A FIRM ON BEHALF OF ALL ASSURANCE 
ENGAGEMENT TEAM MEMBERS AND SUBJECT MATTER EXERT (SME)/SOLE 
PRACTITIONER, WHO HAVE CONDUCTED ASSURANCE ENGAGEMENT(S) 
AS PER PART 1 OF IS 26002 


I, Dr./Mr./Ms. (name of the principal Quality Control Reviewer, appointed by the firm), working for 


(name of the firm) (hereafter as firm’) bearing (employee code ‘or’ BIS LEAP Registration Certificate) on this 
(date, in figure) day of the (name of the month) of the year (year in figure), hereby confirm the following: 


a) That the assurance engagement team members, the QCR(s), the SME(s)/Sole Practitioner and the firm 
(mention the name of the firm) clearly understand the circumstances that could lead to breach of independence 
(during the course of conducting an assurance engagement for the firm) and thereby, the risks that could 
emerge from such impairments, while conducting an assurance engagement as per Part 1 of the Assurance 
Engagement Standard; 


b) That the assurance engagement team members, the QCR(s), the SME(s) and the aforesaid firm in the financial 
year (YYYY/ZZZZ) have not breached their independence nor been in any conflict, during the course of 
conducting an assurance engagement. 


I also give my consent to cooperate and comply with any request made by the competent authority, in furtherance 
of its authority and responsibilities under the Part 1 of the Assurance Engagement Standard, in connection to 
any assurance engagement for what-so-ever purpose that either the firm (name of the firm) and or the competent 
authority and or any other regulatory authority of the Govt. of India, feels is necessary. 


I also understand that my accord of confirmation and consent on the above, on behalf of the assurance engagement 
team members, the QCR(s), the SME(s) and the firm is a requirement to be in compliance with Part 1 of the 
Assurance Engagement Standard. 


Signature of the authorized Quality Control Reviewer: 


Office location of the Quality Control Reviewer: 


Dated: 


Official Stamp of the organization: 
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ANNEX J 
( Clause 4.1.1 ) 
KEY CONTENTS TO BE PRESENT IN THE CONTRACTUAL AGREEMENT 


The minimum contents that shall be present in an 
assurance contractual agreement are presented below: 


a) The objective and scope of the assurance 
engagement; 

b) The report and or the subject matter and the 
information to be assured; 


c) The technical reference to be applied for the review 
of the subject matter and its related information; 


d) The responsibilities of the reporting entity and the 
auditors/firm (as the case may be, depending on 
whether the engagement is an internal or external 
assurance engagement); 

e) The key educational and professional 
qualifications, competence and skill-set of the 
assurance engagement team members, to be 
engaged in the assurance engagement: 


f) The timeline for completion, 


g) The professional fixed fee, if any (with no 
provision of any success fee); 


h) The Annex G that has been signed by the 
SME/Sole Practitioner, and the official 
confirmation received from the reporting entity 
that there is not conflict in engaging the SME/Sole 
Practitioner in the assurance engagement; 


t 


The nature of assurance engagement to be offered, 
that is, whether ‘Reasonable’ and or ‘Limited’ 
type of assurance engagements, specific details of 
which are presented in Annex B; 


J 


k) The scope limitations, if any; 
m) The key deliverables; and 


n) The signature ofthe practitioner and the authorized 
representative of the reporting entity who have 
both agreed to the terms of the contractual 
agreement, with a mention of the date and place of 
signing the contractual agreement. 


ANNEX K 
[ Clause 4.7 a) ] 


MINIMUM INFORMATION OF AN ASSURANCE ENGAGEMENT TO BE DOCUMENTED POST A 
QUALITY CONTROL REVIEW 


The documented information of an assurance 
engagement shall include a minimum of the following: 


a) A copy of the assurance engagement agreement 
contract signed with the reporting entity; 


b) Names of the assurance engagement team 
members, their contact co-ordinates, their 
permanent and corresponding addresses; their 
specific roles in the assurance engagement and the 
responsibilities assigned to them; 


c 


Nas 


Legally enforceable agreement signed with the 
subject matter expert/sole practitioner, 


d 


Nay 


Consultations that took place on conflicting 
matters amongst the assurance engagement 
team and or other experts and the decisions that 
emerged from such discussions; 
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e) The significant challenges, concerns and matters 
that surfaced during the assurance engagement, 
and the safeguards that have been applied for 
addressing the identified variations, if any; 


Filled in independence declarations of the 
assurance engagement team members, subject 
matter expert and the QCR, as per the requisite 
forms (NAFIAE); 


The process and procedures developed and 
applied for conducting the assurance engagement; 
the evidences, information and documentations 
collected, prepared and collated in the course of 
the assurance engagement; and 


g) 


h) Accusations, feedback and complaints received in 
connection to assurance engagement; and 


j) The dated and signed assurance report. 
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ANNEX L 
( Foreword ) 
COMMITTEE COMPOSITION 


Composition of Social Responsibility Sectional Committee, MSD 10 


Organization 


In personal capacity 
AROH Foundation, NOIDA 
Bharat Electronics Ltd, Sahibabad 


Cargill, New Delhi 


Cement Manufacturers’ Association, New Delhi 


Centre for Responsible Business, New Delhi 
Charities Aid Foundation India, New Delhi 
Coca Cola India, Gurugram 


Deloitte Touche Tohmatsu India LLP, 


Department of Commerce, Ministry of Commerce & 
Industry, New Delhi 


Department of Consumer Affairs, Ministry of CA, 
F and PD, New Delhi 


Department of Industrial Policy and Promotion, 
Ministry of Commerce and Industry, New Delhi 


Directorate General of Factory Advice Service and 
Labour Institute (FASLI), New Delhi 


Directorate General of Quality Assurance, New Delhi 


FICCI, New Delhi 


Hyderabad Business School GITAM, Hyderabad 
Indian Institute of Corporate Affairs, 


(Ministry of Corporate Affairs), Manesar, Haryana 


Indian Oil Corporation Ltd, New Delhi 
Infosys BPO Ltd, Bangaluru 

Institute of Chartered Accountants of India 
Institute of Company Secretaries of India 
L & T, Mumbai 


Management Development Institute, Gurugram 


Ministry of Corporate Affairs, New Delhi 
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Representative(s) 


Dr BHASKAR CHATTERJEE (Chairman) 
Dr NEELAM GUPTA 


SHRI RAJEEV KUMAR 
Ms Ekta BHARDWAJ (Alternate) 


Ms DIPANWITA CHAKRABORTY 


SHRI ASHWANI PAHUJA 
DR S. K. SAXENA (Alternate I) 
Dr RACHANA SHARMA (Alternate ID) 


Dr BIMAL ARORA 
SHRI RIJIT SENGUPTA (Alternate) 


Ms MEENAKSHI BATRA 
SHRI AVIJEET KUMAR (Alternate) 


SHRI ISHTEYAQUE AHMED 
Ms SHUBHA SEKHAR (Alternate) 


SHRI SUMIT MAKHIJA 
SHRI SAURABH KHOSLA (Alternate) 


Ms JYOTI YADAV 
Ms TANU SINGH (Alternate) 


SHRI DHARMESH MAKWANA 
SHRI A. K. PANDEY (Alternate) 


SHRI ZAKARIA KHAN YUSUFZAI 
SHRI BINOD KUMAR (Alternate) 


SHRI SUMIT ROY 
SHRI KUNAL SHARMA (Alternate) 


COL SANDEEP ACHARYYA 
SHRI P. LOKANATH, SAO (Alternate) 


Ms RITA ROY CHOUDHURY 
Ms SHRUTI (Alternate) 


Ms Divya KIRTI GUPTA 


SHRI MUKESH KUMAR 


SHRI BIBHUTI PRADHAN 
SHRI RAJEEV THYKATT 
CA PRAMOD JAIN 

CS Mamta BINANI 


SHRI N. SATHYAN 
SHRI P. SATHISH (A/ternate) 


SHRI ANKUR ROY 


SHRI K. M. S. NARAYANAN 


Organization 


Ministry of Labour, New Delhi 


Ministry of Micro, Small and Medium Enterprises, 
New Delhi 


QCI, New Delhi 


SBI, Mumbai 

Steel Authority of India, Ranchi, Jharkhand 

Tata Institute of Social Sciences 

The Energy Research Institute (TERI), New Delhi 
Yes Bank, Mumbai 


Inspired4 Accounting and Advisory Services LLP 
In personal capacity, New Delhi 

In personal capacity, New Delhi 

In personal capacity, New Delhi 

In personal capacity, New Delhi 

BIS Directorate General 
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Representative(s) 


SHRI A. K. SAMANTARAY 


SHRI SANJEEV CHAWLA 
SHRI PIYUSH AGARWAL (Alternate) 


Dr Hari PRAKASH 
Dr S. K. MISHRA (Alternate) 


SHRI KARNAM SEKAR 
SHRI MANOJ KUMAR 
PROF RAHUL SAPKAL 
Dr ANNAPURNA VANCHESWARAN 


SHRI SHAILESH BANTA 
Ms KRITI KUKSAL (Alternate) 


SHRI RAJIB KUMAR DEBNATH 
Ms RADHIKA RALHAN 

SHRI SANDEEP SAXENA 

SHRI DINESH AGARWAL 

DR LALIT KUMAR 


Ms SNEH LATA, SCIENTIST ‘F’ AND HEAD (MSD) 
[ REPRESENTING DIRECTOR GENERAL ( Ex-0fficio ) | 


Member Secretary 


Ms SHALU VARSHNEY 
SCIENTIST ‘D’ (MANAGEMENT AND SYSTEMS), BIS 


Panel for Extra-financial Assurance Standard, MSD 10/P-7 


Organization 


Inspired Accounting and Advisory Services LLP 
In personal capacity, New Delhi 

Cargill, New Delhi 

Centre for Responsible Business, New Delhi 
Deloitte Touche Tohmatsu India LLP 


Department of Public Enterprises, Ministry of Heavy 


Industries and Public Enterprises, New Delhi 
FICCI, New Delhi 


GITAM University 
GIZ 
Indian Institute of Corporate Affairs, 


(Ministry of Corporate Affairs), Manesar, Haryana 


Indian Oil Corporation Ltd, New Delhi 
Institute of Chartered Accountant, New Delhi 


Representative(s) 


SHRI RAJ1B KUMAR DEBNATH (Convener) 
Dr BHASKAR CHATTERJEE (Chairman) 
Ms DIPANWITA CHAKRABORTY 

SHRI RIJIT SENGUPTA 


SHRI SUMIT MAKHIJA 
SHRI SAURABH KHOSLA (Alternate) 


Dr MADHUKAR GUPTA 


Ms Rita Roy CHOUDHURY 
Ms HIMANI KULSHRESHTHA (Alternate) 


Dr Divya KIRTI GUPTA 
Ms SEEMA CHOUDHARY 


SHRI MUKESH KUMAR 


SHRI BIBHUTI PRADHAN 
CA SANJAY VASUDEVA, FCA 
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Organization 
KPMG (Sustainability and CSR Advisory) 


Management Development Institute, Gurugram 
MSCD, BIS, New Delhi 
TERI 


United Nations Global Compact Network India, 
New Delhi 


In personal capacity, New Delhi 


In personal capacity, New Delhi 
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Representative(s) 


SHRI SANTHOSH JAYARAM 
SHRI PRATHMESH RAICHURA (Alternate) 


Dr ANKUR ROY 
Suri U. S. P. YADAV 
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